Debian/libjose4j-java: high 7.5
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.
Action: Upgrade libjose4j-java to 0.7.12-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.12-2 | - |
Fixed versions
| 0.7.12-2 |
Sources
- osv: DEBIAN-CVE-2023-31582#Debian:14/libjose4j-java
- https://security-tracker.debian.org/tracker/CVE-2023-31582
published · modified · JSON