All products

com.nimbusds:nimbus-jose-jwt

Maven · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSONCVE-2025-53864 · GHSA-XWMG-2G98-W7V9 com.nimbusds:nimbus-jose-jwtCryostat 4/nimbus-jose-jwt MavenRed Hat Medium Fix reported
Denial of Service in Connect2id Nimbus JOSE+JWTCVE-2023-52428 · GHSA-GVPG-VGMX-XG6W com.nimbusds:nimbus-jose-jwtLogging Subsystem for Red Hat OpenShift/com.nimbusds/nimbus-jose-jwt MavenRed Hat High Fix reported
Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWTCVE-2019-17195 · GHSA-F6VF-PQ8C-69M4 com.nimbusds:nimbus-jose-jwt Maven Critical Fix reported
Nimbus JOSE+JWT vulnerable to padding oracle attackCVE-2017-12973 · GHSA-JFMQ-4G4M-99RH com.nimbusds:nimbus-jose-jwt Maven Low Fix reported
Nimbus JOSE+JWT missing overflow checkCVE-2017-12972 · GHSA-2QP9-WG27-9PCV com.nimbusds:nimbus-jose-jwt Maven High Fix reported
Improper Verification of Cryptographic Signature in Nimbus JOSE+JWTCVE-2017-12974 · GHSA-PFV2-37F7-9M6W com.nimbusds:nimbus-jose-jwt Maven High Fix reported