5.3
CVSS V3
Denial of service when decrypting attack controlled input in github.com/dvsekhvalnov/jose2go. An attacker controlled input of a PBES2 encrypted JWE blob can have a very large p2c value that, when decrypted, produces a denial-of-service.
Advisories are based on vulnerability information provided by Grype from Anchore.
Products
Chainguard Images© 2024 Chainguard, Inc.