Andrew Bennett JOSE Resource Management error vulnerability

In versions 1.5.0 through 1.11.13 of JOSE, there is a resource management error vulnerability. This vulnerability arises because the JOSEjwk:sharedsecret/2 function, when receiving a JWK with a different key type, calls itself repeatedly with the same parameters, resulting in an unbounded tail...