CVE-2021-29446, GHSA-rvcw-f68w-8h8h
npm/jose
Information Exposure Through Discrepancy
jose-node-cjs-runtime is an npm package which provides a number of cryptographic functions.
All versions before 3.11.4
Upgrade to version 3.11.4 or above.
2021-05-03
source |