Red Hat Single Sign-On 7/jose4j
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| jose4j is vulnerable to DoS via compressed JWE content | org.bitbucket.b_c:jose4jOpenShift Developer Tools and Services/jenkins-2-plugins | MavenRed Hat | High | Fix reported | |
| jose4j denial of service via specifically crafted JWE | org.bitbucket.b_c:jose4jRed Hat Build of Keycloak/jose4j | MavenRed Hat | Medium | Fix reported |