PatchTheCVEnimbus jose\+jwt vulnerabilities and fixes
Recent CVEs affecting nimbus jose\+jwt, with upgrade or downgrade steps. 1 tracked.
Also searched as: nimbusjose\+jwt.
nimbus jose\+jwt has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-02-11. Highest priority: CVE-2023-52428 (score 45/100).
- CVE-2023-52428 HIGH 7.5 UPGRADE In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption)
FAQ
How do I fix nimbus jose\+jwt vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nimbus jose\+jwt being exploited right now?
None of the tracked nimbus jose\+jwt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nimbus jose\+jwt CVE should I patch first?
CVE-2023-52428 currently ranks highest (45/100): In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) .