Maintainer Mode
Sign in with GitHub

cjose

cjose 0.6.2.2 · pkgs/by-name/cj/cjose/package.nix
Sign in to subscribe
Health
Risk
risk 76 critical
  • +60 2 open advisories
  • +8 NIXPKGS-2026-2541 has a public exploit (CISA)
  • +8 0.6.2.2 is behind upstream 0.8.0.20260912
Version
0.6.2.2 upstream 0.8.0.20260912
Channels
master 0.6.2.2 · nixos-unstable 0.6.2.2 · nixos-26.05 0.6.2.2 no channel is behind master
Hydra
succeeded 2w ago
Advisories
NIXPKGS-2026-2541 critical 9.1 public exploit EPSS 0.2% OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption · #561602
CVE-2026-53939
NIXPKGS-2026-2544 high 8.2 EPSS 0.2% OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW) · #561605
CVE-2026-53938
Packaging
not read yet: the next index sweep reads it
Maintainers
midchildan
Pull requests 0
None open.
Issues 0
None open.