2 matches found
DEBIAN-CVE-2025-45767
jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do not meet recommended security standards" does not reflect guidance in a final publication...
PT-2025-31641 · Jose +1 · Jose +1
Name of the Vulnerable Software and Affected Versions: jose version 6.0.10 Description: The jose JavaScript library version 6.0.10 contains weak encryption. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...