GHSA-7G24-QG88-P43Q jose4j uses weak cryptographic algorithm

jose4j before v0.9.3 allows attackers to set a low PBES2 iteration count of 1000 or less...

jose4j uses weak cryptographic algorithm

jose4j before v0.9.3 allows attackers to set a low PBES2 iteration count of 1000 or less...

CVE-2023-31582

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...

CVE-2023-31582

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...

DEBIAN-CVE-2023-31582

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...

UBUNTU-CVE-2023-31582

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...

Design/Logic Flaw

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...

jose4j Security Feature Issue Vulnerability

jose4j is a powerful and easy-to-use open source implementation of the JSON Web Token JWT and the JOSE specification suite JWS, JWE, and JWK open sourced from Bitbucket . A security vulnerability exists in versions of jose4j prior to v0.9.3 that stems from allowing an attacker to set a low...

CVE-2023-31582

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...

CVE-2023-31582

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...

CVE-2023-31582

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...

CVE-2023-31582

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...

CVE-2023-31582

CVE-2023-31582 is covered by a connected document that provides concrete technical details. TheJose4J library (affected component) versions before 0.9.3 are vulnerable to setting a very low iteration count (1000 or less) in cryptographic operations. The linked IBM/ADX bulletin notes the vulnerabi...

CLSA-2023-1698101447 nginx: Fix of CVE-2023-44487

CVE-2023-44487: HTTP/2 - per-iteration stream handling limit...

nginx: Fix of CVE-2023-44487

CVE-2023-44487: HTTP/2 - per-iteration stream handling limit...

CLSA-2023-1697817547 nginx: Fix of CVE-2023-44487

CVE-2023-44487: HTTP/2 - per-iteration stream handling limit...

CLSA-2023-1697742355 Fix CVE(s): CVE-2023-44487

SECURITY UPDATE: The HTTP/2 protocol allows a denial of service because request cancellation can reset many streams quickly - debian/patches/CVE-2023-44487.patch: HTTP/2 - per-iteration stream handling limit. - CVE-2023-44487...

CLSA-2023-1697742241 Fix CVE(s): CVE-2023-44487

SECURITY UPDATE: The HTTP/2 protocol allows a denial of service because request cancellation can reset many streams quickly - debian/patches/CVE-2023-44487.patch: HTTP/2 - per-iteration stream handling limit. - CVE-2023-44487...

PT-2025-54164

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the smc SMC networking subsystem. Specifically, a kernel crash can occur during the smcr port add function due to concurrent access and modificati...

ROS-20230907-04

Vulnerability of DHcheck, DHcheckex or EVPPKEYparamcheck functions of OpenSSL library is related to using a regular expression with inefficient computational complexity. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service. Vulnerability of DHcheck,...