MEDIUM5.9npm
GHSA-58f5-hfqc-jgch· CVE-2021-29443Padding Oracle Attack due to Observable Timing Discrepancy in jose
Modified: 7/8/2026
package
npm/jose
pkg:npm/jose
MEDIUM5.3npm
GHSA-hhhv-q57g-882q· CVE-2024-28176jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
Modified: 9/10/2026
MEDIUM5.3npm
GHSA-jv3g-j58f-9mq9· CVE-2022-36083JOSE vulnerable to resource exhaustion via specifically crafted JWE
Modified: 11/8/2023