CJ
Product
cjose
by OpenIDC · last CVE Sep 8, 2026
2
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch

Add cjose to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-53939
9.1
0%
Sep 8
OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption
Affected: >= 0.6.1, < 0.6.2.6
Showing 1