CVE-2023-50967

The latchset jose C language module for signing and encrypting JSON objects is vulnerable to uncontrolled resource consumption (CWE-400). An attacker can trigger a denial of service (DoS) by providing a large p2c (PBES2 Count) value, which leads to excessive CPU consumption . This vulnerability a...