{"action":"Upgrade node-jose to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"0"}],"component":"node-jose","cve_ids":["CVE-2023-25653"],"ecosystem":"npm","epss":0.00552,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-5h4j-qrvg-9xhw","id":"tcs_01M5KF3TQY16QP6RMP2WE81ST9","modified_at":"2026-09-10T03:49:56.695548465Z","published_at":"2023-02-16T18:44:47Z","references":["https://osv.dev/vulnerability/GHSA-5h4j-qrvg-9xhw","https://github.com/cisco/node-jose/security/advisories/GHSA-5h4j-qrvg-9xhw","https://nvd.nist.gov/vuln/detail/CVE-2023-25653","https://github.com/cisco/node-jose/commit/901d91508a70e3b9bdfc45688ea07bb4e1b8210d","https://github.com/cisco/node-jose"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-5h4j-qrvg-9xhw","url":"https://osv.dev/vulnerability/GHSA-5h4j-qrvg-9xhw"}],"summary":"Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)"}