| Package | Affected versions | Patched versions |
|---|---|---|
| org.bitbucket.b_c:jose4j | < 0.9.3 | 0.9.3 |
| jose4j | < 0.9.3 | 0.9.3 |
jose4j before v0.9.3 allows attackers to set a low PBES2 iteration count of 1000 or less.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free