Openidc Cjose
3 CVEs affecting Openidc Cjose. Latest disclosed: 2026-09-09. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-53939 | Critical | 9.1 | 2026-09-09 | OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). In versions 0.6.1 through 0.6.2.5, when cjose encrypts a JWE usi… |
CVE-2023-37464 | High | 8.6 | 2023-07-14 | OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). The AES GCM decryption routine incorrectly uses the Tag length f… |
CVE-2026-53938 | High | 8.2 | 2026-09-09 | OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). Prior to version 0.6.2.5, cjose's JWE decryption path for the AE… |