cjose vulnerabilities (SUSE)
3 vulnerabilities.
-
cjoseSUSE OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption 9.1 Critical -
cjoseSUSE OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW) 8.2 High -
cjoseSUSE Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose 8.6 High