panva

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

panva records in CISA KEV

No panva vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jose 2 records MEDIUM

Records

2 records in Jose · all components

TI-2022-16506 CVE-2022-36083 · GHSA-jv3g-j58f-9mq9

JOSE vulnerable to resource exhaustion via specifically crafted JWE

MEDIUM 63

JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers, Electron, and Deno.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01639 Published 2022-09-07 Fixed in 1.28.2, 2.0.6 +2 CWE-400

TI-2021-10156 CVE-2021-29443 · GHSA-58f5-hfqc-jgch

Padding Oracle Attack due to Observable Timing Discrepancy in jose

LOW 29

jose is an npm library providing a number of cryptographic operations.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01167 Published 2021-04-16 Fixed in 1.28.1, 2.0.5 +1 CWE-203

Open these records in search →

Critical	0
High	0
Medium	6
Low	0
No CVSS	0