jose vulnerabilities (Azure Linux)
5 vulnerabilities.
-
joseAzure Linux Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose 5.9 Medium -
joseAzure Linux ECDSA signature length is not validated in jose, allowing signature malleability 5.1 Medium -
joseAzure Linux Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types 5.9 Medium -
joseAzure Linux Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2 6.9 Medium -
joseAzure Linux latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption)... 7.5 High