High severityNVD Advisory· Published Dec 17, 2025· Updated Jan 23, 2026

CVE-2024-29371

Description

In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.bitbucket.b_c:jose4jMaven	< 0.9.6	0.9.6

Affected products

106

jose4j/jose4jcpe-rescue
osv-coords105 versions
pkg:apk/chainguard/apache-pulsar pkg:apk/chainguard/apache-pulsar-compat pkg:apk/chainguard/confluent-common-docker pkg:apk/chainguard/confluent-common-docker-base pkg:apk/chainguard/hadoop-fips-3.3.6 pkg:apk/chainguard/kafka-3.7 pkg:apk/chainguard/kafka-3.8 pkg:apk/chainguard/kafka-4.0 pkg:apk/chainguard/kafka_exporter-strimzi-compat pkg:apk/chainguard/kafka-iamguarded-compat-4.0 pkg:apk/chainguard/kafka-strimzi-compat pkg:apk/chainguard/kayenta-2026.1 pkg:apk/chainguard/kayenta-fips-2026.1 pkg:apk/chainguard/prometheus-jmx-exporter-strimzi-compat pkg:apk/chainguard/strimzi-kafka-operator pkg:apk/chainguard/strimzi-kafka-operator-cluster-operator pkg:apk/chainguard/strimzi-kafka-operator-kafka-agent pkg:apk/chainguard/strimzi-kafka-operator-kafka-agent-3 pkg:apk/chainguard/strimzi-kafka-operator-kafka-base pkg:apk/chainguard/strimzi-kafka-operator-kafka-init pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs-cc pkg:apk/chainguard/strimzi-kafka-operator-mirror-maker-agent pkg:apk/chainguard/strimzi-kafka-operator-topic-operator pkg:apk/chainguard/strimzi-kafka-operator-tracing-agent pkg:apk/chainguard/strimzi-kafka-operator-user-operator pkg:apk/wolfi/apache-pulsar pkg:apk/wolfi/apache-pulsar-compat pkg:apk/wolfi/confluent-common-docker pkg:apk/wolfi/confluent-common-docker-base pkg:apk/wolfi/kafka-3.8 pkg:apk/wolfi/kafka-4.0 pkg:apk/wolfi/kafka_exporter-strimzi-compat pkg:apk/wolfi/kafka-iamguarded-compat-4.0 pkg:apk/wolfi/kafka-strimzi-compat pkg:apk/wolfi/prometheus-jmx-exporter-strimzi-compat pkg:apk/wolfi/strimzi-kafka-operator pkg:apk/wolfi/strimzi-kafka-operator-cluster-operator pkg:apk/wolfi/strimzi-kafka-operator-kafka-agent pkg:apk/wolfi/strimzi-kafka-operator-kafka-agent-3 pkg:apk/wolfi/strimzi-kafka-operator-kafka-base pkg:apk/wolfi/strimzi-kafka-operator-kafka-init pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs-cc pkg:apk/wolfi/strimzi-kafka-operator-mirror-maker-agent pkg:apk/wolfi/strimzi-kafka-operator-topic-operator pkg:apk/wolfi/strimzi-kafka-operator-tracing-agent pkg:apk/wolfi/strimzi-kafka-operator-user-operator pkg:maven/org.bitbucket.b_c/jose4j pkg:rpm/suse/suse-manager-5.0-aarch64-proxy-httpd-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-proxy-httpd-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-proxy-salt-broker-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-proxy-salt-broker-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-proxy-squid-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-proxy-squid-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-proxy-ssh-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-proxy-ssh-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-proxy-tftpd-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-proxy-tftpd-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-server-attestation-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-server-hub-xmlrpc-api-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-server-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-aarch64-server-migration-14-16-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-proxy-httpd-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-proxy-httpd-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-proxy-salt-broker-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-proxy-salt-broker-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-proxy-squid-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-proxy-squid-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-proxy-ssh-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-proxy-ssh-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-proxy-tftpd-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-proxy-tftpd-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-server-attestation-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-server-hub-xmlrpc-api-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-server-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-ppc64le-server-migration-14-16-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-proxy-httpd-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-proxy-httpd-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-proxy-salt-broker-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-proxy-salt-broker-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-proxy-squid-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-proxy-squid-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-proxy-ssh-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-proxy-ssh-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-proxy-tftpd-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-proxy-tftpd-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-server-attestation-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-server-hub-xmlrpc-api-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-server-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-s390x-server-migration-14-16-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-proxy-httpd-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-proxy-httpd-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-proxy-salt-broker-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-proxy-salt-broker-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-proxy-squid-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-proxy-squid-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-proxy-ssh-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-proxy-ssh-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-proxy-tftpd-image&distro=SUSE%20Manager%20Proxy%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-proxy-tftpd-image&distro=SUSE%20Manager%20Retail%20Branch%20Server%20Extension%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-server-attestation-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-server-hub-xmlrpc-api-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-server-image&distro=SUSE%20Manager%20Server%205.0 pkg:rpm/suse/suse-manager-5.0-x86_64-server-migration-14-16-image&distro=SUSE%20Manager%20Server%205.0
< 4.1.2-r2+ 104 more
- (no CPE)range: < 4.1.2-r2
- (no CPE)range: < 4.1.2-r2
- (no CPE)range: < 7.6.9-r1
- (no CPE)range: < 7.6.9-r0
- (no CPE)range: < 3.3.6-r19
- (no CPE)range: < 3.7.2-r50
- (no CPE)range: < 3.8.1-r49
- (no CPE)range: < 4.0.1-r2
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 4.0.1-r2
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 2026.1.0-r1
- (no CPE)range: < 2026.1.0-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r5
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 4.1.2-r2
- (no CPE)range: < 4.1.2-r2
- (no CPE)range: < 7.6.9-r1
- (no CPE)range: < 7.6.9-r0
- (no CPE)range: < 3.8.1-r49
- (no CPE)range: < 4.0.1-r2
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 4.0.1-r2
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r5
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.49.1-r1
- (no CPE)range: < 0.9.6
- (no CPE)range: < 5.0.7-7.30.13
- (no CPE)range: < 5.0.7-7.30.13
- (no CPE)range: < 5.0.7-7.32.15
- (no CPE)range: < 5.0.7-7.32.15
- (no CPE)range: < 5.0.7-7.30.6
- (no CPE)range: < 5.0.7-7.30.6
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-6.34.5
- (no CPE)range: < 5.0.7-6.30.7
- (no CPE)range: < 5.0.7-7.37.12
- (no CPE)range: < 5.0.7-7.30.7
- (no CPE)range: < 5.0.7-7.30.13
- (no CPE)range: < 5.0.7-7.30.13
- (no CPE)range: < 5.0.7-7.32.15
- (no CPE)range: < 5.0.7-7.32.15
- (no CPE)range: < 5.0.7-7.30.6
- (no CPE)range: < 5.0.7-7.30.6
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-6.34.5
- (no CPE)range: < 5.0.7-6.30.7
- (no CPE)range: < 5.0.7-7.37.12
- (no CPE)range: < 5.0.7-7.30.7
- (no CPE)range: < 5.0.7-7.30.13
- (no CPE)range: < 5.0.7-7.30.13
- (no CPE)range: < 5.0.7-7.32.15
- (no CPE)range: < 5.0.7-7.32.15
- (no CPE)range: < 5.0.7-7.30.6
- (no CPE)range: < 5.0.7-7.30.6
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-6.34.5
- (no CPE)range: < 5.0.7-6.30.7
- (no CPE)range: < 5.0.7-7.37.12
- (no CPE)range: < 5.0.7-7.30.7
- (no CPE)range: < 5.0.7-7.30.13
- (no CPE)range: < 5.0.7-7.30.13
- (no CPE)range: < 5.0.7-7.32.15
- (no CPE)range: < 5.0.7-7.32.15
- (no CPE)range: < 5.0.7-7.30.6
- (no CPE)range: < 5.0.7-7.30.6
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-7.30.5
- (no CPE)range: < 5.0.7-6.34.5
- (no CPE)range: < 5.0.7-6.30.7
- (no CPE)range: < 5.0.7-7.37.12
- (no CPE)range: < 5.0.7-7.30.7

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-3677-xxcr-wjqvghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-29371ghsaADVISORY
bitbucket.org/b_c/jose4j/commits/19a90a64c47bb07c4aa5462f1316d5c293d81fcfghsaWEB
bitbucket.org/b_c/jose4j/issues/220/vuln-zip-bomb-attackghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000