PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
joserfc joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection Medium Risk 6.0 14 hours ago 13 hours ago
joserfc joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption High Risk 7.5 14 hours ago 13 hours ago
joserfc joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads Critical 9.5 11 months ago 3 days ago
joserfc joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363) High Risk 8.0 4 months ago 1 month ago
joserfc joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization Medium Risk 5.3 4 months ago 1 month ago
joserfc joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS) High Risk 7.5 8 months ago 1 month ago
joserfc joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363) Unknown 3 months ago 3 months ago
joserfc joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS) High Risk 7.5 3 months ago 3 months ago
joserfc joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization Medium Risk 5.3 3 months ago 3 months ago
joserfc joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads Unknown 4 months ago 4 months ago
Data courtesy of OSV.dev
Page 1