Debian/libjose4j-java: high 7.5
In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token
Action: Upgrade libjose4j-java to 0.9.6-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.6-1 | - |
Fixed versions
| 0.9.6-1 |
Sources
published · modified · JSON