`jose`

Ecosystem:
npm

Package URL:
pkg:npm/jose

Total PRs:
3,073 Dependabot PRs

Latest PR:
about 8 hours ago

Unique Repositories:
971 repositories

Unique Repos (30 days):
50 repositories

Security Advisories

Padding Oracle Attack due to Observable Timing Discrepancy in jose

GHSA-58f5-hfqc-jgch CVE-2021-29443 MODERATE published about 5 years ago • updated about 19 hours ago

jose is an npm library providing a number of cryptographic operations. ### Impact [AES_CBC_HMAC_SHA2 Algorithm](https://tools.ietf.org/html/rfc751...

jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext

GHSA-hhhv-q57g-882q CVE-2024-28176 MODERATE published over 2 years ago • updated 18 days ago

A vulnerability has been identified in the JSON Web Encryption (JWE) decryption interfaces, specifically related to the [support for decompressing ...

6.2.1 → 6.2.3 Patch PR

Open about 10 hours ago 1 comment

deps: Bump the npm-minor-patch group across 1 directory with 37 updates

xaverric/atlas-lab #79

6.2.2 → 6.2.3 Patch PR

Open 3 days ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 49 updates

MUA-India/mua #20

6.2.2 → 6.2.3 Patch PR

Open 7 days ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 48 updates

jamesaphoenix/tx-agent-kit #58

6.2.2 → 6.2.3 Patch PR

Open 8 days ago 1 comment

deps(deps): bump the patch-and-minor group across 1 directory with 49 updates

artpromedia/AIVO-LMS #72

6.2.2 → 6.2.3 Patch PR

Open 9 days ago 5 comments

deps(deps): bump the patch-and-minor group across 1 directory with 38 updates

artpromedia/AIVO-LMS #70

6.2.2 → 6.2.3 Patch PR

Open 11 days ago 2 comments

[yarn]: Bump the dependencies group across 1 directory with 83 updates

internet-identity-labs/nfid-wallet-client #3163

6.2.2 → 6.2.3 Patch PR

Closed 13 days ago 1 comment

deps(deps): bump the production-dependencies group across 1 directory with 31 updates

mohamedblueprintrak-design/BluePrint #49

6.2.2 → 6.2.3 Patch PR

Closed 14 days ago 5 comments

Bump the development-version-updates group across 1 directory with 72 updates

mrlonis/todo-ui #418

6.2.2 → 6.2.3 Patch PR

Open 17 days ago 1 comment

build(deps): bump jose from 6.2.2 to 6.2.3

damonto/zeroauth #1

6.2.2 → 6.2.3 Patch PR

Closed 17 days ago 1 comment

chore(deps)(deps): bump the production-dependencies group across 1 directory with 94 updates

x907/website-badscandi #288

6.2.2 → 6.2.3 Patch PR

Closed 19 days ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

mirumee/nimara-ecommerce #663

6.2.1 → 6.2.3 Patch PR

Open 19 days ago 1 comment

chore: bump the root-dev group across 1 directory with 49 updates

stevenschling13/Trading-App #413

6.2.2 → 6.2.3 Patch PR

Open 21 days ago 4 comments

chore(deps): bump the prod-dependencies group across 1 directory with 46 updates

gustavovalverde/zentity #184

6.2.1 → 6.2.3 Patch PR

Open 21 days ago 1 comment

chore(deps): bump the npm-all group across 1 directory with 33 updates

teamcarrillo405-hub/prevailing-wage #8

6.2.2 → 6.2.3 Patch PR

Closed 21 days ago 2 comments

chore(deps): bump the minor-and-patch group with 10 updates

broomva/broomva.tech #207

6.2.2 → 6.2.3 Patch PR

Open 22 days ago 2 comments

chore(deps)(deps): bump the production-dependencies group across 1 directory with 93 updates

x907/website-badscandi #285

6.2.2 → 6.2.3 Patch PR

Closed 22 days ago 2 comments

chore(deps): bump the minor-and-patch group with 23 updates

Aleksei1999/speakflow #12

6.2.2 → 6.2.3 Patch PR

Open 22 days ago 1 comment

chore(deps): bump jose from 6.2.2 to 6.2.3

3roiler/api #76

6.2.2 → 6.2.3 Patch PR

Open 23 days ago 1 comment

build(deps): Bump the production-deps group across 1 directory with 11 updates

sundayharmony/-next-gear-auto #35

6.2.2 → 6.2.3 Patch PR

Open 25 days ago 2 comments

build(deps): bump the minor-and-patch group across 1 directory with 43 updates

mission69b/audric #100

6.2.2 → 6.2.3 Patch PR

Closed 26 days ago 3 comments

build(deps): Bump the minor-and-patch group across 1 directory with 42 updates

mission69b/audric #86

6.2.2 → 6.2.3 Patch PR

Open 27 days ago 2 comments

Bump the production group across 1 directory with 24 updates

thanhan92-f1/hitechclaw-ai #36

6.2.2 → 6.2.3 Patch PR

Closed 28 days ago 2 comments

chore(deps): bump the npm-minor-patch group across 1 directory with 32 updates

tmohanvamsi/kagent #35

6.2.2 → 6.2.3 Patch PR

Closed 28 days ago 2 comments

build(deps): bump the minor-and-patch group across 1 directory with 32 updates

polive106/ProtoPal #57

6.2.2 → 6.2.3 Patch PR

Closed 28 days ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 38 updates

Funfamm/aim-platform #22

6.2.2 → 6.2.3 Patch PR

Open 28 days ago 2 comments

build(deps-dev): bump the dev-dependencies group across 1 directory with 15 updates

Life-Navigator/life-nav-mvp #50

6.2.1 → 6.2.3 Patch PR

Open 28 days ago 3 comments

chore(deps): bump the production-deps group across 1 directory with 26 updates

usbryanchlam/mykb #162

6.2.1 → 6.2.3 Patch PR

Open 28 days ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 41 updates

MUA-India/mua #17

6.2.2 → 6.2.3 Patch PR

Open 28 days ago 2 comments

deps: bump the patch-updates group across 1 directory with 7 updates

Datankare/platform-foundation #209

6.2.2 → 6.2.3 Patch PR

Open 28 days ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 18 updates

ludoviclabs-dotcom/finance-platform #45

6.2.2 → 6.2.3 Patch PR

Closed 28 days ago 2 comments

chore(deps): bump the all-dependencies group across 1 directory with 38 updates

Clarion1631/probuild #102

6.2.2 → 6.2.3 Patch PR

Closed 28 days ago 1 comment

chore(deps)(deps): bump the production-minor-and-patch group across 1 directory with 50 updates

talyssonoliver/IntelliFlow-CRM #79

6.2.2 → 6.2.3 Patch PR

Open 28 days ago 8 comments

chore(deps): bump the npm-all group across 1 directory with 29 updates

teamcarrillo405-hub/prevailing-wage #7

6.2.2 → 6.2.3 Patch PR

Open 28 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 20 updates

Cam-Smith-One/Headless_CRM #7

6.2.1 → 6.2.3 Patch PR

Open 29 days ago 1 comment

build(deps): Bump the production-deps group across 1 directory with 10 updates

sundayharmony/-next-gear-auto #31

6.2.2 → 6.2.3 Patch PR

Open 29 days ago 2 comments

build(deps): Bump the production-deps group across 1 directory with 11 updates

sundayharmony/-next-gear-auto #29

6.2.2 → 6.2.3 Patch PR

Closed 29 days ago 3 comments

chore(deps): bump jose from 6.2.2 to 6.2.3 in /frontend

walebabatunde/floatra #158

6.2.2 → 6.2.3 Patch PR

Open 30 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 31 updates

aravindvnair99/Spot-the-Hole #747

2.0.6 → 2.0.7 Patch PR

Open about 1 month ago 3 comments

build(deps): Bump the minor-and-patch group across 1 directory with 28 updates

mission69b/audric #84

6.2.2 → 6.2.3 Patch PR

Open about 1 month ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 18 updates

AndriGitDev/Draugar #16

6.2.2 → 6.2.3 Patch PR

Closed about 1 month ago 1 comment

deps(deps): bump the npm-production group with 6 updates

DanFashauer/DEV #92

6.2.2 → 6.2.3 Patch PR

Closed about 1 month ago 3 comments

deps: bump the npm-production group across 1 directory with 36 updates

mnaimfaizy/code-theory #48

6.2.2 → 6.2.3 Patch PR

Closed about 1 month ago 1 comment

Bump the all-dependencies group across 1 directory with 50 updates

amodalai/amodal #443

6.2.2 → 6.2.3 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the production group in /api with 3 updates

kubermatic/kubelb-dashboard #111

6.2.1 → 6.2.3 Patch PR

Open about 1 month ago 7 comments

chore(deps)(deps): bump the production-dependencies group across 1 directory with 127 updates

x907/website-badscandi #273

6.2.2 → 6.2.3 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 50 updates

JesusFilm/forge #928

6.2.1 → 6.2.3 Patch PR

Closed about 1 month ago 5 comments

chore(deps): bump jose from 6.2.2 to 6.2.3

vinaykumarvk/PS-WMS #75

6.2.2 → 6.2.3 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the all-minor-and-patch group across 1 directory with 30 updates

TiM1113/FoodDelivery-AWS-Vercell #136

6.2.2 → 6.2.3 Patch PR

Open about 1 month ago 3 comments

chore(backend)(deps): bump the minor-patch group across 1 directory with 5 updates

jwillz7667/ProEstimateAI #21

6.2.2 → 6.2.3 Patch PR

Open about 1 month ago 2 comments

Package Details

Name:	`jose`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/jose`
JSON API:	View JSON

Security Advisories

3

Active advisories

MODERATE 3

View All npm Advisories

Package Information

Description:

JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes

Repository:	https://github.com/panva/jose
Homepage:	https://github.com/panva/jose
Latest Release:	`6.0.11` about 1 year ago
Dependent Repos:	54,898
Dependent Packages:	1,109
Downloads:	68,075,453
Ranking:	Top 0.1298% by dependent repos Top 0.0433% by downloads Top 0.0628% by dependent pkgs

PR Status

Open 1,550 (50.5%)

Merged 100 (3.3%)

Closed 1,166 (38.0%)

PR Types

Major 1,178 (38.4%)

Minor 705 (23.0%)

Patch 933 (30.4%)

jose

Security Advisories

Padding Oracle Attack due to Observable Timing Discrepancy in jose

jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext

JOSE vulnerable to resource exhaustion via specifically crafted JWE

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

3

Package Information

PR Status

PR Types

`jose`