jose-php project
OSS Librariesoss-project
Top products
Latest CVEs
The 2 most recently published vulnerabilities affecting jose-php project.
- CVE-2016-5429jose-php before 2.2.1 does not use constant-time operations for HMAC comparison, which makes it easier for remote attackers to obtain sensitive information via a timing attack, related to JWE.php a...3.7
- CVE-2016-5430The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cl...5.3