Tag

node-jose

Safeguard articles tagged "node-jose" — guides, analysis, and best practices for software supply chain and application security.

1 article

DevSecOps

node-jose Security: Using Cisco's JOSE Library Safely

node-jose is Cisco's JavaScript implementation of the JOSE standards for signing and encrypting tokens. Here is the CVE-2017-16007 invalid-curve flaw and how to use JWE and JWS defensively.

Jun 24, 20256 min read