CVE-2018-0114
1 advisory.
npm/node-jose CVE-2018-0114: high 7.5
Cisco node-jose improper validation of JWT signature
Action: Upgrade node-jose to 0.11.0 or later.
npm i node-jose@0.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.0 | - |
Fixed versions
| 0.11.0 |
Sources
- osv: GHSA-jfxm-w8g2-4rcv
- https://nvd.nist.gov/vuln/detail/CVE-2018-0114
- https://github.com/cisco/node-jose
- https://github.com/cisco/node-jose/blob/master/CHANGELOG.md
- https://github.com/zi0Black/POC-CVE-2018-0114
- https://tools.cisco.com/security/center/viewAlert.x?alertId=56326
- https://web.archive.org/web/20210124130907/http://www.securityfocus.com/bid/102445
- https://www.exploit-db.com/exploits/44324
CVE-2018-0114 · published · modified · JSON