Vendors / panva Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now panva records in CISA KEV No panva vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 63
JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers, Electron, and Deno.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01639 · Published 2022-09-07 · Fixed in 1.28.2, 2.0.6 +2 CWE-400
Priority LOW 31
jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web Signature (JWS), JSON Web Encryption (JWE), JSON Web Key (JWK), JSON Web Key Set (JWKS), and more.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02102 · Published 2024-03-09 · Partial fix · 2.0.7, 4.15.5 CWE-400
Priority LOW 29
jose-node-cjs-runtime is an npm package which provides a number of cryptographic functions.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01067 · Published 2021-04-16 · Fixed in 3.11.4 CWE-203
Priority LOW 29
jose-node-esm-runtime is an npm package which provides a number of cryptographic functions.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01067 · Published 2021-04-16 · Fixed in 3.11.4 CWE-203
Priority LOW 29
jose-browser-runtime is an npm package which provides a number of cryptographic functions.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01067 · Published 2021-04-16 · Fixed in 3.11.4 CWE-203
Priority LOW 29
jose is an npm library providing a number of cryptographic operations.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01167 · Published 2021-04-16 · Fixed in 1.28.1, 2.0.5 +1 CWE-203
Open these records in search → All records by CVSS severity
0 0 6 0 0
THREATIST.IORead the docs