CVE-2023-51775: JOSE4J Project JOSE4J

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

Affected products

• JOSE4J Project JOSE4J: before 0.9.4 (fixed in 0.9.4)

Published 2024-02-29. Last modified 2026-06-17.