PatchTheCVEjose vulnerabilities and fixes
Recent CVEs affecting jose, with upgrade or downgrade steps. 2 tracked.
jose has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-03-20. Highest priority: CVE-2023-50967 (score 54/100).
- CVE-2024-28176 MEDIUM 4.9 UPGRADE UPGRADE jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT),
- CVE-2023-50967 HIGH 7.5 UPGRADE MITIGATE latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p
FAQ
How do I fix jose vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jose being exploited right now?
None of the tracked jose CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jose CVE should I patch first?
CVE-2023-50967 currently ranks highest (54/100): latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p.