High severity7.0NVD Advisory· Published Aug 1, 2025· Updated Apr 15, 2026

CVE-2025-45767

Description

jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do not meet recommended security standards" does not reflect guidance in a final publication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Panva/Josereferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 6.0.10

Patches

Vulnerability mechanics

References

gist.github.com/ZupeiNie/705a606fbb99f3bb8c9b51e5bc13c91dnvd
gist.github.com/ZupeiNie/705a606fbb99f3bb8c9b51e5bc13c91dnvd
github.com/panva/jose/blob/1e36dd29e76511e06737e5d5d500d81e01a9c3d2/src/lib/check_key_length.tsnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000