CJ
Product
cjose
by OpenIDC · last CVE Sep 8, 2026
2
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch

Add cjose to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-53938
8.2
0%
Sep 8
OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)
Affected: < 0.6.2.5
Showing 1