Security Advisories

CGA-gw52-mj78-8v54

Published

Last updated

Package

kafka-jre-bcfips

Latest Update

Fixed

Fixed Version

3.7.0-r0

Aliases

Severity

6.5

Medium

CVSS V3

jose4j denial of service via specifically crafted JWE

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.