CVE-2015-2964: Namshi Namshi/jose

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

NAMSHI | JOSE 5.0.0 and earlier allows remote attackers to bypass signature verification via crafted tokens in a JSON Web Tokens (JWT) header.

Affected products

• Namshi Namshi/jose: up to and including 5.0.0

Published 2015-07-05. Last modified 2026-06-17.