Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

jose

Package Overview
Dependencies
Maintainers
1
Versions
213
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

jose - npm Package Compare versions

Comparing version 1.21.0 to 1.21.1

9

CHANGELOG.md

@@ -5,2 +5,11 @@ # Change Log

## [1.21.1](https://github.com/panva/jose/compare/v1.21.0...v1.21.1) (2020-01-25)
### Bug Fixes
* contactKDF iteration count fixed for key sizes larger than 256 bits ([70ff222](https://github.com/panva/jose/commit/70ff22227ad303e57228dc8351688531499a833a))
# [1.21.0](https://github.com/panva/jose/compare/v1.20.0...v1.21.0) (2020-01-23)

@@ -7,0 +16,0 @@

2

lib/jwa/ecdh/derive.js

@@ -5,3 +5,3 @@ const { createHash } = require('crypto')

const concat = (key, length, value) => {
const iterations = Math.ceil(length / 256)
const iterations = Math.ceil(length / 32)
let res

@@ -8,0 +8,0 @@

{
"name": "jose",
"version": "1.21.0",
"version": "1.21.1",
"description": "JSON Web Almost Everything - JWA, JWS, JWE, JWK, JWT, JWKS for Node.js with minimal dependencies",

@@ -5,0 +5,0 @@ "keywords": [

@@ -315,3 +315,3 @@ # jose

| AES_CBC_HMAC_SHA2 | ✓ | A128CBC-HS256, A192CBC-HS384, A256CBC-HS512 |
| (X)ChaCha | ✓ <sup>via [plugin][plugin-chacha]</sup> | C20P, X20CP |
| (X)ChaCha | ✓ <sup>via [plugin][plugin-chacha]</sup> | C20P, XC20P |

@@ -333,3 +333,3 @@ | JWT profile validation | Supported | profile option value |

operations but it is an entirely opt-in behaviour, downgrade attacks are prevented by the required
use of a special `JWK.Key` instance that cannot be instantiated through the key import API.
use of a special `JWK.Key` instance that cannot be instantiated through the key import API
<sup>3</sup> RSA-OAEP-256 is only supported when Node.js >= 12.9.0 runtime is detected

@@ -336,0 +336,0 @@

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc