jose-browser-runtime (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package jose-browser-runtime, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2021-29444 — CVSS 5.9 (medium): jose-browser-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the…
• CVE-2022-36083 — CVSS 5.3 (medium): JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js…