jose-node-esm-runtime (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package jose-node-esm-runtime, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2021-29445 — CVSS 5.9 (medium): jose-node-esm-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the…
• CVE-2022-36083 — CVSS 5.3 (medium): JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js…
• CVE-2024-28176 — CVSS 4.9 (medium): jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web Signature (JWS)…