Homepage
About Snyk

jwcrypto@1.5.1 vulnerabilities

Implementation of JOSE Web standards

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the jwcrypto package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Denial of Service (DoS)

Affected versions of this package are vulnerable to Denial of Service (DoS) due to the deserialize function. An attacker can cause a denial of service by passing in a malicious JWE Token with a high compression ratio. When the server processes this token, it will consume a lot of memory and processing time.

How to fix Denial of Service (DoS)?

Upgrade jwcrypto to version 1.5.6 or higher.

[0.5.0,1.5.6)
Go back to all versions of this package