cjose vulnerabilities (Azure Linux)

3 vulnerabilities.

• cjose Azure Linux OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption CVE-2026-53939 Fix available 9.1 CriticalSeptember 8, 2026
• cjose Azure Linux OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW) CVE-2026-53938 Fix available 8.2 HighSeptember 8, 2026
• cjose Azure Linux Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose CVE-2023-37464 Fix available 8.6 HighJuly 14, 2023