CVE-2025-45767

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do not meet recommended security standards" does not reflect guidance in a final publication.

Published 2025-08-01. Last modified 2026-06-17.