{"action":"Upgrade gree/jose to 2.2.1 or later.","affected":[{"fixed":"2.2.1","introduced":"0"}],"component":"gree/jose","cve_ids":["CVE-2016-5431"],"ecosystem":"Packagist","epss":0.00955,"exploited":false,"fixed_versions":["2.2.1"],"ghsa_id":"GHSA-xm5f-hc9r-76f3","id":"tcs_01M5KFB5EM4WET98TXTMTTXCZK","modified_at":"2023-11-08T03:58:31.448438Z","published_at":"2022-05-24T16:52:44Z","references":["https://osv.dev/vulnerability/GHSA-xm5f-hc9r-76f3","https://nvd.nist.gov/vuln/detail/CVE-2016-5431","https://github.com/nov/jose-php/commit/1cce55e27adf0274193eb1cd74b927a398a3df4b","https://github.com/nov/jose-php"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xm5f-hc9r-76f3","url":"https://osv.dev/vulnerability/GHSA-xm5f-hc9r-76f3"}],"summary":"PHP JOSE Library by Gree Inc. Uses a Broken or Risky Cryptographic Algorithm"}