2023-10-24 00:00:00
mitre
PUBLISHED
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.