{"action":"Upgrade org.bitbucket.b_c:jose4j to 0.9.3 or later.","affected":[{"fixed":"0.9.3","introduced":"0"}],"component":"org.bitbucket.b_c:jose4j","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["0.9.3"],"ghsa_id":"GHSA-jgvc-jfgh-rjvv","id":"tcs_01M5N92Y2NW1J9CAXHZ9YGQDY6","modified_at":"2026-09-10T03:50:00.924518133Z","published_at":"2023-04-27T23:52:54Z","references":["https://osv.dev/vulnerability/GHSA-jgvc-jfgh-rjvv","https://github.com/google/security-research/security/advisories/GHSA-jgvc-jfgh-rjvv","https://bitbucket.org/b_c/jose4j/commits/14e62a8dee9decb4ff6e0625aedc5724601bfdb6","https://bitbucket.org/b_c/jose4j/commits/63b86581e7bfcc2d9d04ee15caea4b5bfb911f59","https://bitbucket.org/b_c/jose4j/commits/tag/jose4j-0.9.3","https://github.com/google/security-research"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-jgvc-jfgh-rjvv","url":"https://osv.dev/vulnerability/GHSA-jgvc-jfgh-rjvv"}],"summary":"Chosen Ciphertext Attack in Jose4j"}