tocsin

CVE-2022-36083

4 advisories.

npm/jose CVE-2022-36083: medium 5.3, EPSS 1.54%

JOSE vulnerable to resource exhaustion via specifically crafted JWE

Action: Upgrade jose to 1.28.2 or later.

npm i jose@1.28.2
npm i jose@2.0.6
npm i jose@3.20.4
npm i jose@4.9.2

Affected

introducedfixedlast affected
1.0.01.28.2-
2.0.02.0.6-
3.0.03.20.4-
4.0.04.9.2-

Fixed versions

1.28.22.0.63.20.44.9.2

Sources

CVE-2022-36083 · published · modified · JSON

npm/jose-browser-runtime CVE-2022-36083: medium 5.3, EPSS 1.54%

JOSE vulnerable to resource exhaustion via specifically crafted JWE

Action: Upgrade jose-browser-runtime to 3.20.4 or later.

npm i jose-browser-runtime@3.20.4
npm i jose-browser-runtime@4.9.2

Affected

introducedfixedlast affected
3.0.03.20.4-
4.0.04.9.2-

Fixed versions

3.20.44.9.2

Sources

CVE-2022-36083 · published · modified · JSON

npm/jose-node-cjs-runtime CVE-2022-36083: medium 5.3, EPSS 1.54%

JOSE vulnerable to resource exhaustion via specifically crafted JWE

Action: Upgrade jose-node-cjs-runtime to 3.20.4 or later.

npm i jose-node-cjs-runtime@3.20.4
npm i jose-node-cjs-runtime@4.9.2

Affected

introducedfixedlast affected
3.0.03.20.4-
4.0.04.9.2-

Fixed versions

3.20.44.9.2

Sources

CVE-2022-36083 · published · modified · JSON

npm/jose-node-esm-runtime CVE-2022-36083: medium 5.3, EPSS 1.54%

JOSE vulnerable to resource exhaustion via specifically crafted JWE

Action: Upgrade jose-node-esm-runtime to 3.20.4 or later.

npm i jose-node-esm-runtime@3.20.4
npm i jose-node-esm-runtime@4.9.2

Affected

introducedfixedlast affected
3.0.03.20.4-
4.0.04.9.2-

Fixed versions

3.20.44.9.2

Sources

CVE-2022-36083 · published · modified · JSON