CVE-2023-25653

node-jose is a JavaScript implementation of the JSON Object Signing and Encryption JOSE for web browsers and node.js-based servers. Prior to version 2.2.0, when using the non-default "fallback" crypto back-end, ECC operations in "node-jose" can trigger a Denial-of-Service DoS condition, due to a...

PT-2023-20213

Name of the Vulnerable Software and Affected Versions node-jose versions prior to 2.2.0 Description The issue is related to a Denial-of-Service DoS condition in the "fallback" crypto back-end of node-jose, which can be triggered by malicious input or randomly for some ECC operations. This conditi...