Panva Jose
4 CVEs affecting Panva Jose. Latest disclosed: 2024-03-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-29444 | Medium | 5.9 | 2021-04-16 | jose-browser-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC… |
CVE-2021-29443 | Medium | 5.9 | 2021-04-16 | jose is an npm library providing a number of cryptographic operations. In vulnerable versions AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CB… |
CVE-2022-36083 | Medium | 5.3 | 2022-09-07 | JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers… |
CVE-2024-28176 | Medium | 4.9 | 2024-03-09 | jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web Signature (JWS), JSON Web Encryption (J… |