Vendors / Dvsekhvalnov Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Dvsekhvalnov records in CISA KEV No Dvsekhvalnov vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00277 · Published 2025-11-12 · Partial fix · 1.7.0 CWE-400
Priority LOW 34
The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00824 · Published 2023-12-25 · Fixed in 1.6.0 CWE-770
Open these records in search → All records by CVSS severity
0 2 0 0 0
