Socket
Socket
Sign inDemoInstall

jose

Package Overview
Dependencies
Maintainers
1
Versions
209
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

jose - npm Package Compare versions

Comparing version 2.0.5 to 2.0.6

8

lib/jwe/decrypt.js

@@ -55,3 +55,3 @@ const { inflateRawSync } = require('zlib')

*/
const jweDecrypt = (skipValidateHeaders, serialization, jwe, key, { crit = [], complete = false, keyManagementAlgorithms, contentEncryptionAlgorithms } = {}) => {
const jweDecrypt = (skipValidateHeaders, serialization, jwe, key, { crit = [], complete = false, keyManagementAlgorithms, contentEncryptionAlgorithms, maxPBES2Count = 10000 } = {}) => {
key = getKey(key, true)

@@ -146,2 +146,8 @@

if (alg.startsWith('PBES2')) {
if (opts && opts.p2c > maxPBES2Count) {
throw new errors.JWEInvalid('JOSE Header "p2c" (PBES2 Count) out is of acceptable bounds')
}
}
try {

@@ -148,0 +154,0 @@ if (alg === 'dir') {

2

package.json
{
"name": "jose",
"version": "2.0.5",
"version": "2.0.6",
"description": "JSON Web Almost Everything - JWA, JWS, JWE, JWK, JWT, JWKS for Node.js with minimal dependencies",

@@ -5,0 +5,0 @@ "keywords": [

@@ -404,2 +404,3 @@ /// <reference types="node" />

keyManagementAlgorithms?: string[];
maxPBES2Count?: number;
}

@@ -406,0 +407,0 @@

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc