Jose4j_project Jose4j
3 CVEs affecting Jose4j_project Jose4j. Latest disclosed: 2025-12-17. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-29371 | High | 7.5 | 2025-12-17 | In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally… |
CVE-2023-31582 | High | 7.5 | 2023-10-25 | jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less. |
CVE-2023-51775 | Medium | 6.5 | 2024-02-29 | The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value. |