GHSA-7g24-qg88-p43q
jose4j uses weak cryptographic algorithm
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.bitbucket.b_c:jose4j | < 0.9.3 | 0.9.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
jose4j before v0.9.3 allows attackers to set a low PBES2 iteration count of 1000 or less.
References
External links from the advisory. They lead to third-party sites.