Reason-jose Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Reason-jose Project records in CISA KEV

No Reason-jose Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2023-09726 CVE-2023-23928

MEDIUM 42

reason-jose is a JOSE implementation in ReasonML and OCaml.`Jose.Jws.validate` does not check HS256 signatures.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00459 Published 2023-02-01 Fixed in 0.8.2 CWE-347