{ "affected": [ { "ranges": [ { "database_specific": { "cpe": [ "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.3:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.4:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.5:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.6:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.7:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.8:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.9:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.10:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.10.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.11.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.12.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.13.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.13.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.14:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.16:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.19:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.19.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.20:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.21:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.22:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.22.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.23:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.24:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.25:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.26:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.26.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.3:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.4:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.5:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.6:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.7:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.10:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.3:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.4:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.5:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.6:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.7:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.8:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.9:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.10:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.12:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.13:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.13.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.14:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.15:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.15.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.17:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.18:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.19:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.20:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.21:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.22:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.23:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.24:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.25:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.26:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.26.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.27:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.27.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.28:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.29:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.30:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.31:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.31.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.32:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.33:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.35:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "2.0" }, { "last_affected": "2.0" }, { "introduced": "2.0.1" }, { "last_affected": "2.0.1" }, { "introduced": "2.1" }, { "last_affected": "2.1" }, { "introduced": "2.1.1" }, { "last_affected": "2.1.1" }, { "introduced": "2.2" }, { "last_affected": "2.2" }, { "introduced": "2.3" }, { "last_affected": "2.3" }, { "introduced": "2.4" }, { "last_affected": "2.4" }, { "introduced": "2.5" }, { "last_affected": "2.5" }, { "introduced": "2.6" }, { "last_affected": "2.6" }, { "introduced": "2.7" }, { "last_affected": "2.7" }, { "introduced": "2.8" }, { "last_affected": "2.8" }, { "introduced": "2.9" }, { "last_affected": "2.9" }, { "introduced": "2.10" }, { "last_affected": "2.10" }, { "introduced": "2.10.1" }, { "last_affected": "2.10.1" }, { "introduced": "2.11.0" }, { "last_affected": "2.11.0" }, { "introduced": "2.12.0" }, { "last_affected": "2.12.0" }, { "introduced": "2.13.0" }, { "last_affected": "2.13.0" }, { "introduced": "2.13.1" }, { "last_affected": "2.13.1" }, { "introduced": "2.14" }, { "last_affected": "2.14" }, { "introduced": "2.15" }, { "last_affected": "2.15" }, { "introduced": "2.15.1" }, { "last_affected": "2.15.1" }, { "introduced": "2.15.2" }, { "last_affected": "2.15.2" }, { "introduced": "2.16" }, { "last_affected": "2.16" }, { "introduced": "2.17" }, { "last_affected": "2.17" }, { "introduced": "2.17.1" }, { "last_affected": "2.17.1" }, { "introduced": "2.17.2" }, { "last_affected": "2.17.2" }, { "introduced": "2.18" }, { "last_affected": "2.18" }, { "introduced": "2.18.1" }, { "last_affected": "2.18.1" }, { "introduced": "2.18.2" }, { "last_affected": "2.18.2" }, { "introduced": "2.19" }, { "last_affected": "2.19" }, { "introduced": "2.19.1" }, { "last_affected": "2.19.1" }, { "introduced": "2.20" }, { "last_affected": "2.20" }, { "introduced": "2.21" }, { "last_affected": "2.21" }, { "introduced": "2.22" }, { "last_affected": "2.22" }, { "introduced": "2.22.1" }, { "last_affected": "2.22.1" }, { "introduced": "2.23" }, { "last_affected": "2.23" }, { "introduced": "2.24" }, { "last_affected": "2.24" }, { "introduced": "2.25" }, { "last_affected": "2.25" }, { "introduced": "2.26" }, { "last_affected": "2.26" }, { "introduced": "2.26.1" }, { "last_affected": "2.26.1" }, { "introduced": "3.0" }, { "last_affected": "3.0" }, { "introduced": "3.1" }, { "last_affected": "3.1" }, { "introduced": "3.1.1" }, { "last_affected": "3.1.1" }, { "introduced": "3.1.2" }, { "last_affected": "3.1.2" }, { "introduced": "3.2" }, { "last_affected": "3.2" }, { "introduced": "3.2.1" }, { "last_affected": "3.2.1" }, { "introduced": "3.2.2" }, { "last_affected": "3.2.2" }, { "introduced": "3.3" }, { "last_affected": "3.3" }, { "introduced": "3.4" }, { "last_affected": "3.4" }, { "introduced": "3.5" }, { "last_affected": "3.5" }, { "introduced": "3.6" }, { "last_affected": "3.6" }, { "introduced": "3.7" }, { "last_affected": "3.7" }, { "introduced": "3.8" }, { "last_affected": "3.8" }, { "introduced": "3.8.1" }, { "last_affected": "3.8.1" }, { "introduced": "3.8.2" }, { "last_affected": "3.8.2" }, { "introduced": "3.9" }, { "last_affected": "3.9" }, { "introduced": "3.9.1" }, { "last_affected": "3.9.1" }, { "introduced": "3.9.2" }, { "last_affected": "3.9.2" }, { "introduced": "3.10" }, { "last_affected": "3.10" }, { "introduced": "4.0" }, { "last_affected": "4.0" }, { "introduced": "4.0.1" }, { "last_affected": "4.0.1" }, { "introduced": "4.1" }, { "last_affected": "4.1" }, { "introduced": "4.1.1" }, { "last_affected": "4.1.1" }, { "introduced": "4.2" }, { "last_affected": "4.2" }, { "introduced": "4.3" }, { "last_affected": "4.3" }, { "introduced": "4.3.1" }, { "last_affected": "4.3.1" }, { "introduced": "4.4" }, { "last_affected": "4.4" }, { "introduced": "4.5" }, { "last_affected": "4.5" }, { "introduced": "4.6" }, { "last_affected": "4.6" }, { "introduced": "4.7" }, { "last_affected": "4.7" }, { "introduced": "4.8" }, { "last_affected": "4.8" }, { "introduced": "4.9" }, { "last_affected": "4.9" }, { "introduced": "4.10" }, { "last_affected": "4.10" }, { "introduced": "4.11" }, { "last_affected": "4.11" }, { "introduced": "4.11.1" }, { "last_affected": "4.11.1" }, { "introduced": "4.11.2" }, { "last_affected": "4.11.2" }, { "introduced": "4.12" }, { "last_affected": "4.12" }, { "introduced": "4.13" }, { "last_affected": "4.13" }, { "introduced": "4.13.1" }, { "last_affected": "4.13.1" }, { "introduced": "4.14" }, { "last_affected": "4.14" }, { "introduced": "4.15" }, { "last_affected": "4.15" }, { "introduced": "4.15.1" }, { "last_affected": "4.15.1" }, { "introduced": "4.16" }, { "last_affected": "4.16" }, { "introduced": "4.16.1" }, { "last_affected": "4.16.1" }, { "introduced": "4.16.2" }, { "last_affected": "4.16.2" }, { "introduced": "4.17" }, { "last_affected": "4.17" }, { "introduced": "4.18" }, { "last_affected": "4.18" }, { "introduced": "4.19" }, { "last_affected": "4.19" }, { "introduced": "4.20" }, { "last_affected": "4.20" }, { "introduced": "4.21" }, { "last_affected": "4.21" }, { "introduced": "4.22" }, { "last_affected": "4.22" }, { "introduced": "4.23" }, { "last_affected": "4.23" }, { "introduced": "4.24" }, { "last_affected": "4.24" }, { "introduced": "4.25" }, { "last_affected": "4.25" }, { "introduced": "4.26" }, { "last_affected": "4.26" }, { "introduced": "4.26.1" }, { "last_affected": "4.26.1" }, { "introduced": "4.27" }, { "last_affected": "4.27" }, { "introduced": "4.27.1" }, { "last_affected": "4.27.1" }, { "introduced": "4.28" }, { "last_affected": "4.28" }, { "introduced": "4.29" }, { "last_affected": "4.29" }, { "introduced": "4.30" }, { "last_affected": "4.30" }, { "introduced": "4.31" }, { "last_affected": "4.31" }, { "introduced": "4.31.1" }, { "last_affected": "4.31.1" }, { "introduced": "4.32" }, { "last_affected": "4.32" }, { "introduced": "4.33" }, { "last_affected": "4.33" }, { "introduced": "4.34" }, { "last_affected": "4.34" }, { "introduced": "4.34.1" }, { "last_affected": "4.34.1" }, { "introduced": "4.34.2" }, { "last_affected": "4.34.2" }, { "introduced": "4.35" }, { "last_affected": "4.35" } ], "source": [ "CPE_STRING", "REFERENCES" ] }, "events": [ { "introduced": "f46fe5204828a77b7a7c34977de9284e0da26085" }, { "last_affected": "a33e4cda470bdd8d33d7074d4ed5ab721297e514" }, { "fixed": "f3a7a801f0c6b078899fed9226368eb7b44e2b2f" } ], "repo": "https://bitbucket.org/connect2id/nimbus-jose-jwt", "type": "GIT" } ], "versions": [ "2.0", "2.0.1", "2.1", "2.1.1", "2.10", "2.10.1", "2.11.0", "2.12.0", "2.13.0", "2.13.1", "2.14", "2.15", "2.15.1", "2.15.2", "2.16", "2.17", "2.17.1", "2.17.2", "2.18", "2.18.1", "2.18.2", "2.19", "2.19.1", "2.2", "2.20", "2.21", "2.22", "2.22.1", "2.23", "2.24", "2.25", "2.26", "2.26.1", "2.3", "2.4", "2.5", "2.6", "2.7", "2.8", "2.9", "3.0", "3.1", "3.1.1", "3.1.2", "3.10", "3.2", "3.2.1", "3.2.2", "3.3", "3.4", "3.5", "3.6", "3.7", "3.8", "3.8.1", "3.8.2", "3.9", "3.9.1", "3.9.2", "4.0", "4.0.1", "4.1", "4.1.1", "4.10", "4.11", "4.11.1", "4.11.2", "4.12", "4.13", "4.13.1", "4.14", "4.15", "4.15.1", "4.16", "4.16.1", "4.16.2", "4.17", "4.18", "4.19", "4.2", "4.20", "4.21", "4.22", "4.23", "4.24", "4.25", "4.26", "4.26.1", "4.27", "4.27.1", "4.28", "4.29", "4.3", "4.3.1", "4.30", "4.31", "4.32", "4.33", "4.34", "4.34.1", "4.34.2", "4.35", "4.4", "4.5", "4.6", "4.7", "4.8", "4.9" ] } ], "database_specific": { "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.10:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.11:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.12:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.3:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.4:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.5:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.6:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.7:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.8:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.9.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.9:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "1.0" }, { "last_affected": "1.0" }, { "introduced": "1.1" }, { "last_affected": "1.1" }, { "introduced": "1.2" }, { "last_affected": "1.2" }, { "introduced": "1.3" }, { "last_affected": "1.3" }, { "introduced": "1.4" }, { "last_affected": "1.4" }, { "introduced": "1.5" }, { "last_affected": "1.5" }, { "introduced": "1.6" }, { "last_affected": "1.6" }, { "introduced": "1.7" }, { "last_affected": "1.7" }, { "introduced": "1.8" }, { "last_affected": "1.8" }, { "introduced": "1.9" }, { "last_affected": "1.9" }, { "introduced": "1.9.1" }, { "last_affected": "1.9.1" }, { "introduced": "1.10" }, { "last_affected": "1.10" }, { "introduced": "1.11" }, { "last_affected": "1.11" }, { "introduced": "1.12" }, { "last_affected": "1.12" } ], "source": "CPE_STRING", "vendor_product": "connect2id:nimbus_jose+jwt" } ] }, "details": "Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an Invalid Curve Attack in environments where the JCE provider lacks the applicable curve validation.", "id": "CVE-2017-12974", "modified": "2026-07-08T05:36:01.080426714Z", "published": "2017-08-20T16:29:00.313Z", "references": [ { "type": "WEB", "url": "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E" }, { "type": "ADVISORY", "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/f3a7a801f0c6b078899fed9226368eb7b44e2b2f" }, { "type": "ADVISORY", "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt" }, { "type": "FIX", "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/217/explicit-check-for-ec-public-key-on-curve" } ], "severity": [ { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "type": "CVSS_V3" } ] }