Every CVE whose affected-product data names Cisco Node-jose, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2018-0114 — CVSS 7.5 (high): A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens…
CVE-2023-25653 — CVSS 7.5 (high): node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior…
CVE-2017-16007 — CVSS 5.9 (medium): node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based…