CVE-2023-25653
1 advisory.
npm/node-jose CVE-2023-25653: high 7.5
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
Action: Upgrade node-jose to 2.2.0 or later.
npm i node-jose@2.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.0 | - |
Fixed versions
| 2.2.0 |
Sources
- osv: GHSA-5h4j-qrvg-9xhw
- https://github.com/cisco/node-jose/security/advisories/GHSA-5h4j-qrvg-9xhw
- https://nvd.nist.gov/vuln/detail/CVE-2023-25653
- https://github.com/cisco/node-jose/commit/901d91508a70e3b9bdfc45688ea07bb4e1b8210d
- https://github.com/cisco/node-jose
CVE-2023-25653 · published · modified · JSON