potatosalad/erlang-jose

potatosalad/erlang-jose

GitHubGitHub
GitHubgithub.com
hexdocs.pmhexdocs.pm
Releases46
Frequency2 months 3 weeks
Last Release
Stars334
JSON Object Signing and Encryption (JOSE) for Erlang and Elixir
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-50966↗
5.3 MEDIUM—

erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header.