Vulnerabilities

TI-2024-19434 CVE-2024-29371 · GHSA-3677-xxcr-wjqv

In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by…

HIGH 72

In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00257 Published 2025-12-17 Partial fix · 0.9.6 CWE-1259

TI-2023-28403 CVE-2023-51775 · GHSA-6qvw-249j-h44c

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service…

MEDIUM 62

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00871 Published 2023-12-25 Partial fix · 0.9.4 CWE-400

TI-2023-15127 CVE-2023-31582 · GHSA-7g24-qg88-p43q

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.

MEDIUM 40

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00766 Published 2023-10-24 Partial fix · 0.9.3 CWE-331

Vulnerabilities

Filters

In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by…

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service…

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.