Lucene search

K
githubGitHub Advisory DatabaseGHSA-6294-6RGP-FR7R
HistoryFeb 29, 2024 - 3:33 a.m.

jose2go vulnerable to denial of service via large p2c value

2024-02-2903:33:14
GitHub Advisory Database
github.com
10
jose2go
denial of service
cpu consumption
pbes2 count
software

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

Affected configurations

Vulners
Node
github.com\/dvsekhvalnov\/jose2goRange<1.6.0
CPENameOperatorVersion
github.com/dvsekhvalnov/jose2golt1.6.0

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%