Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

OpenIDC

OpenIDC cjose vulnerabilities

3 published CVEs name OpenIDC cjose among the affected products.

Newest CVEs

  • CVE-2026-53939

    OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption

    OpenIDC · cjose

    Critical9.1
  • CVE-2026-53938

    OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)

    OpenIDC · cjose

    High8.2
  • CVE-2023-37464

    Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose

    OpenIDC · cjose

    High8.6