1. Brian Campbell Avatar Brian Campbell
  2. Untitled project
  3. jose4j

Issues

Filter by:

Advanced search

Issues (1–25 of 220)

Title T P Status Votes Assignee Created Updated Actions
#220: [Vuln] ZIP bomb Attack
bug major closed
#219: json_simple uses deprecated-for-removal primitive constructors
enhancement minor resolved
#218: JwksDecryptionKeyResolver does not support resolving OKP keys for ECDH-ES (or ECDH-ES with key wrapping)
bug minor closed
#217: Add module-info.java
enhancement major on hold 1
#216: How to create an RSA JWK from java.security.interfaces.RSAPrivateKey ?
bug major resolved
#215: How to create an RSA JWK from java.security.interfaces.RSAPrivateKey ?
bug major duplicate
#214: Provide more clear error response when "cty" header is provided with invalid JWT
bug minor resolved
#213: Security and trust from Google play for contentEncryptionKeyAlgorithm
bug major closed
#212: Dos Attack Via specifically crafted JWE
bug critical closed
#211: Support RSA-OAEP-512 as KeyManangementAlgorithmIdentifier
enhancement major on hold
#210: setSignature in JWS should fail when invalid characters are detected prior to running base64urldecode
bug minor on hold
#209: HttpsJwks and HttpsJwksVerificationKeyResolver with Pluggable Cache implementation
enhancement minor on hold
#208: Integrating jose4j into OSS-Fuzz
proposal major on hold
#207: Using EdDSA triggers NoSuchAlgorithmException
bug trivial invalid
#206: What is the reason sender constrained verification is pushed on to Resource Server instead of introspection API doing it?
proposal major closed
#205: How to construct jkt claim? Any plans to add it to library?
bug critical closed
#204: GHSA-jgvc-jfgh-rjvv version upgrade 0.7.x or 0.6.x to 0.9.3
proposal blocker resolved
#203: Insecure support of setting PBE less then 1000 iteration count
enhancement minor closed
#202: JWE - PartyUInfo Header ("apu") to contain Ephemeral Public Key
proposal major closed
#201: Handle X509 certificates in base64 without prefix/suffix
enhancement major resolved
#200: Google Play Store identifies unsafe encryption in the class SimpleAeadCipher
bug major closed
#199: Exception javax.crypto.AEADBadTagException: error:1e000065:Cipher functions:OPENSSL_internal:BAD_DECRYPT
bug major invalid
#198: NullPointerException when the curve is not supported
bug minor closed
#197: Authenticated Proxy
enhancement minor new
#196: update some dependencies
bug major closed
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6
  8. 7
  9. 8
  10. 9