Top technology
Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Jose4j
HIGH 7.5
CVE-2024-29371
In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exc…
Fix: 0.9.5+
Fix from $1,950
2025-12-17
Jose4j
MEDIUM 6.5
CVE-2023-51775
The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
Fix: 0.9.4+
Fix from $1,600
2024-02-29
Jose4j
HIGH 7.5
CVE-2023-31582
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.
Fix: 0.9.3+
Fix from $1,950
2023-10-25