MEDIUM5.3npm
GHSA-hhhv-q57g-882q· CVE-2024-28176jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
Modified: 9/10/2026
package
npm/jose-node-cjs-runtime
pkg:npm/jose-node-cjs-runtime
MEDIUM5.3npm
GHSA-jv3g-j58f-9mq9· CVE-2022-36083JOSE vulnerable to resource exhaustion via specifically crafted JWE
Modified: 11/8/2023
MEDIUM5.9npm
GHSA-rvcw-f68w-8h8h· CVE-2021-29446Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime
Modified: 7/8/2026