agentprime: openidc-cjoseEvery new CVE for openidc-cjose.https://agentprime.io/CVE-2026-53939: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryptionhttps://agentprime.io/advisories/CVE-2026-53939/https://agentprime.io/advisories/CVE-2026-53939/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 23:36:13 GMTCVEcriticalCVE-2026-53938: OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)https://agentprime.io/advisories/CVE-2026-53938/https://agentprime.io/advisories/CVE-2026-53938/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 23:25:30 GMTCVECVE-2023-37464: Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjosehttps://agentprime.io/advisories/CVE-2023-37464/https://agentprime.io/advisories/CVE-2023-37464/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Jul 2023 20:25:18 GMTCVE