Reason-Jose Project Reason-Jose
1 CVEs affecting Reason-Jose Project Reason-Jose. Latest disclosed: 2023-02-01. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-23928 | Medium | 5.9 | 2023-02-01 | reason-jose is a JOSE implementation in ReasonML and OCaml.`Jose.Jws.validate` does not check HS256 signatures. This allows tampering of JWS header and payload… |