Known vulnerabilities in Nimbus JOSE+JWT
Vendor:
Connect2id Ltd.
Software:
Nimbus JOSE+JWT
Software CPE:
cpe:2.3:a:connect2id:nimbus_jose_plus_jwt:*:*:*:*:*:*:*:*
Website:
https://connect2id.com/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.9
Breakdown by Severity Chart
9.37.0
9.37.3
9.37.1
10.0
10.0.1
10.0.2
9.37.4
9.37.2
8.21
8.20.2
8.20.1
9.0.1
9.0
8.20
8.19
8.18.1
8.18
8.17.1
8.17
8.16
8.15
8.14.1
8.14
8.13
8.12
8.11
8.10
8.9
8.8
8.7
8.6
8.5.1
8.5
8.4.1
8.4
8.3
8.2.1
8.2
8.1
8.0
7.9
7.8.1
7.8
7.7
7.6
7.5.1
7.5
7.4
7.3.1
7.3
7.2.1
7.1
7.0.1
7.0
6.8
6.7
6.6
6.5.1
6.5
6.4.2
6.4.1
6.4
6.3.1
6.3
6.2
6.1.1
6.1
6.0.2
6.0.1
6.0
5.14
5.13
5.12
5.11
5.10
5.9
5.8
5.7
5.6
5.5
5.4
5.3
5.2
5.1
5.0
4.41.3
4.41.2
4.41.1
4.41
4.40
4.39.2
4.39.1
4.39
4.38
4.37.1
4.37
4.36.1
4.36
4.35
4.34.2
4.34.1
4.34
4.33
4.32
4.31.1
4.30
4.29
4.28
4.27.1
4.27
4.26.1
4.26
4.25
4.24
4.23
4.22
4.21
4.20
4.19
4.18
4.17
4.16.2
4.16.1
4.16
4.15.1
4.15
4.14
4.13.1
4.13
4.12
4.11.2
4.11.1
4.11
4.10
4.9
4.8
4.7
4.6
4.5
4.4
4.3.1
4.3
4.2
4.1.1
4.1
4.0.1
4.0
3.10
3.9.2
3.9.1
3.9
3.8.2
3.8.1
3.8
3.7
3.6
3.5
3.4
3.3
3.2.2
3.2.1
3.2
3.1.2
3.1.1
3.1
3.0
2.26.1
2.26
2.25
2.24
2.23
2.22.1
2.22
2.21
2.20
2.19.1
2.19
2.18.2
2.18.1
2.18
2.17.2
2.17.1
2.17
2.16
2.15.2
2.15.1
2.15.0
2.14.0
2.13.1
2.13.0
2.12.0
2.11.0
2.10.1
2.10
2.9
2.8
2.7
2.6
2.5
2.4
2.3
2.2
2.1.1
2.1
2.0.1
2.0
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU116142 - Uncontrolled Recursion CVE-2025-53864 |
CWE-674 | Medium | 9.37.4, 10.0.2 | 26.09.2025 |
SB2025092630 SB2025092631 SB2025100301 and 27 more |
||
| #VU24177 - Cryptographic Issues CVE-2017-12974 |
CWE-310 | Low | 4.39 | 10.01.2020 |
SB2017082002 SB2022072128 SB2026030921 |
||
| #VU24176 - Cryptographic Issues CVE-2017-12973 |
CWE-310 | Medium | 4.39 | 10.01.2020 |
SB2017082002 SB2022072128 |
||
| #VU24175 - Integer overflow CVE-2017-12972 |
CWE-190 | Medium | 4.39 | 10.01.2020 |
SB2017082002 SB2022072128 SB2026030921 |
||
| #VU24168 - Improper input validation CVE-2019-17195 |
CWE-20 | Medium | 7.9 | 09.01.2020 |
SB2019101519 SB2020010921 SB2020040218 and 20 more |