Jose-php-project
2 CVEs tracked since 2016. Since Sep 2016, none of them reached CISA KEV.
Jose-php-project CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2016-09 | 2 | 0 |
Products
The products that kept showing up in Jose-php-project's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 2 most recently published vulnerabilities affecting Jose-php-project.
- CVE-2016-5429jose-php before 2.2.1 does not use constant-time operations for HMAC comparison, which makes it easier for remote attackers to obtain sensitive information via a timing attack, related to JWE.php a...3.7
- CVE-2016-5430The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cl...5.3
The record
- Peak rank
- #57 in Sep 2016
- Busiest month shown
- Sep 2016, 2 CVEs
- Months with a KEV entry
- 0 since Sep 2016
- Monthly snapshots
- 1 since 2016