OpenIDC cjose vulnerabilities

3 published CVEs name OpenIDC cjose among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 2
Critical: 1
Known exploited: 0

Critical 1High 2Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

20231
20262

Newest CVEs

CVE-2026-53939
OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption
OpenIDC · cjose
Critical9.1
CVE-2026-53938
OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)
OpenIDC · cjose
High8.2
CVE-2023-37464
Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose
OpenIDC · cjose
High8.6

Most common weaknesses