Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-45767
7
HIGHCVSS v3
Published
August 1, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do not meet recommended security standards" does not reflect guidance in a final publication.
panva/jose
GitHubJWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes
GitHubJWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimesNVD