MEDIUM5.9npm
GHSA-4v4g-726h-xvfv· CVE-2021-29445Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime
Modified: 7/8/2026
package
pkg:npm/jose-node-esm-runtime
Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime
Modified: 7/8/2026
jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
Modified: 9/10/2026
JOSE vulnerable to resource exhaustion via specifically crafted JWE
Modified: 11/8/2023