Filtered by vendor Jose4j Project Subscriptions
Filtered by product Jose4j Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-51775 2 Jose4j Project, Redhat 6 Jose4j, Apicurio Registry, Jboss Enterprise Application Platform and 3 more 2025-05-08 6.5 Medium
The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVE-2023-31582 2 Jose4j Project, Redhat 4 Jose4j, Amq Streams, Jboss Data Grid and 1 more 2024-11-21 7.5 High
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.