MEDIUM5.9npm
GHSA-4v4g-726h-xvfv· CVE-2021-29445Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime
Modified: 7/8/2026
package
npm/jose-node-esm-runtime
pkg:npm/jose-node-esm-runtime
MEDIUM5.3npm
GHSA-hhhv-q57g-882q· CVE-2024-28176jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
Modified: 9/10/2026
MEDIUM5.3npm
GHSA-jv3g-j58f-9mq9· CVE-2022-36083JOSE vulnerable to resource exhaustion via specifically crafted JWE
Modified: 11/8/2023