NJ
Product
Nimbus JOSE+JWT
by Connect2id · last CVE Jul 11, 2025
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 1
Watch

Add Nimbus JOSE+JWT to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-53864
5.8
1%
Jul 11
Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT…
Affected: before 10.0.2
Showing 1