cjose

Direct Vulnerabilities

Known vulnerabilities in the cjose package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Heap-based Buffer Overflow	<0:0.6.1-5.module+el8.10.0+91060+e975931f
H Out-of-bounds Read	<0:0.6.1-5.module+el8.10.0+91060+e975931f
M CVE-2025-3891	<0:0.6.1-4.module+el8.10.0+90549+7b4eddfc
H Information Exposure	<0:0.6.1-4.module+el8.10.0+90549+7b4eddfc
M CVE-2024-24814	<0:0.6.1-4.module+el8.10.0+90385+c8f58f84
M Open Redirect	<0:0.6.1-4.module+el8.9.0+90009+6a7196cf
M NULL Pointer Dereference	<0:0.6.1-4.module+el8.9.0+90009+6a7196cf
H Use of a Broken or Risky Cryptographic Algorithm	<0:0.6.1-3.module+el8.8.0+21137+b6cedbc2
M Open Redirect	<0:0.6.1-2.module+el8+5139+bcb28322
M Open Redirect	<0:0.6.1-2.module+el8+5139+bcb28322
M Use of Insufficiently Random Values	<0:0.6.1-2.module+el8+5139+bcb28322
M Cross-site Scripting (XSS)	<0:0.6.1-2.module+el8+5139+bcb28322
M Open Redirect	<0:0.6.1-2.module+el8+5139+bcb28322
M Open Redirect	<0:0.6.1-2.module+el8+5139+bcb28322