CVE-2023-52428
HighAdvisory
Published 11 Feb 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.008
- 55th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 128
- of 17,781 indexed, latest versions
- Container images
- 137
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Denial of Service in Connect2id Nimbus JOSE+JWT
Carried by container images the latest versions of 128 of 17,781 indexed charts deploy, on 137 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nimbus-jose-jwtmaven | 3.1.2, 3.9, 4.41.1, 4.41.2+29 more | 9.37.2 | 137 |
- OSV records
- GHSA-gvpg-vgmx-xg6w
Charts affected
128 by stars
Container images carrying it
137 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| confluentinc/ | 8ec46c27982f | nimbus-jose-jwt | 9.37.2 | 1 |
| confluentinc/ | ee403d5b9090 | nimbus-jose-jwt | 9.37.2 | 1 |
| confluentinc/ | b651d4b6185a | nimbus-jose-jwt | 9.37.2 | 1 |
| dannielkil/ | e3b479a55a69 | nimbus-jose-jwt | 9.37.2 | 1 |
| datappeal/ | e38c085a3567 | nimbus-jose-jwt | 9.37.2 | 1 |
| dbanda/ | 0ca125e68e53 | nimbus-jose-jwt | 9.37.2 | 1 |
| dbanda/ | d0e6367876ae | nimbus-jose-jwt | 9.37.2 | 1 |
| deltaio/ | 8b75118187c5 | nimbus-jose-jwt | 9.37.2 | 1 |
| dremio/ | 80ed2e3b7c43 | nimbus-jose-jwt | 9.37.2 | 1 |
| eclipseaerios/ | 15fba526a4f8 | nimbus-jose-jwt | 9.37.2 | 1 |
| egdsandaru/ | 681baa1926f4 | nimbus-jose-jwt | 9.37.2 | 1 |
| elastictranscoder/ | 963ab3858c6b | nimbus-jose-jwt | 9.37.2 | 1 |
| elastictranscoder/ | 26208b8c2359 | nimbus-jose-jwt | 9.37.2 | 1 |
| elastictranscoder/ | 5b75d19e2733 | nimbus-jose-jwt | 9.37.2 | 1 |
| empathyco/ | 03e724e41eeb | nimbus-jose-jwt | 9.37.2 | 1 |
| farberg/ | 4b4a22487394 | nimbus-jose-jwt | 9.37.2 | 1 |
| flyway/ | 45b5d7cdc75a | nimbus-jose-jwt | 9.37.2 | 1 |
| flyway/ | 80f12c80502b | nimbus-jose-jwt | 9.37.2 | 1 |
| gchq/ | c460bb587d6d | nimbus-jose-jwt | 9.37.2 | 1 |
| gradiant/ | e3bf364fe713 | nimbus-jose-jwt | 9.37.2 | 1 |
| gresearchdev/ | 91863a50afb7 | nimbus-jose-jwt | 9.37.2 | 1 |
| gridgain/ | d32d182a0e6a | nimbus-jose-jwt | 9.37.2 | 1 |
| gurolakman/ | ce23b20a8a17 | nimbus-jose-jwt | 9.37.2 | 1 |
| gurolakman/ | b22e746edd5d | nimbus-jose-jwt | 9.37.2 | 1 |
| hazelcast/ | 8fe26efde8e1 | nimbus-jose-jwt | 9.37.2 | 1 |
| hazelcast/ | a825ecbe9fda | nimbus-jose-jwt | 9.37.2 | 1 |
| hazelcast/ | f9d34300d330 | nimbus-jose-jwt | 9.37.2 | 1 |
| ibmcom/ | ce9d2a564273 | nimbus-jose-jwt | 9.37.2 | 1 |
| ibmcom/ | e31ff09e8aad | nimbus-jose-jwt | 9.37.2 | 1 |
| ibmcom/ | 7e4dc1e27cdf | nimbus-jose-jwt | 9.37.2 | 1 |
| intelloop/ | 4c61bc3dd3f8 | nimbus-jose-jwt | 9.37.2 | 1 |
| jhipster/ | 7184525acd4d | nimbus-jose-jwt | 9.37.2 | 1 |
| jingking/ | 43e74ab234e1 | nimbus-jose-jwt | 9.37.2 | 1 |
| lavandadelpatio/ | 94e225a5a6f8 | nimbus-jose-jwt | 9.37.2 | 1 |
| lavandadelpatio/ | 92de3c3426d2 | nimbus-jose-jwt | 9.37.2 | 1 |
| lavandadelpatio/ | 71f2ccec8c0d | nimbus-jose-jwt | 9.37.2 | 1 |
| library/ | 310b9fc03b06 | nimbus-jose-jwt | 9.37.2 | 1 |
| library/ | 332c6d416808 | nimbus-jose-jwt | 9.37.2 | 1 |
| library/ | 88c2ec10c7f2 | nimbus-jose-jwt | 9.37.2 | 1 |
| library/ | fdc73b3249c1 | nimbus-jose-jwt | 9.37.2 | 1 |
| library/ | 0842dcd4c8f8 | nimbus-jose-jwt | 9.37.2 | 1 |
| library/ | 7e43ff493a47 | nimbus-jose-jwt | 9.37.2 | 1 |
| library/ | a9bc5a3a1fc3 | nimbus-jose-jwt | 9.37.2 | 1 |
| library/ | ef9723cf4fe4 | nimbus-jose-jwt | 9.37.2 | 1 |
| library/ | bd5d420506d6 | nimbus-jose-jwt | 9.37.2 | 1 |
| library/ | 3882d9493d38 | nimbus-jose-jwt | 9.37.2 | 1 |
| maksimkavalenka/ | 64a25afb8748 | nimbus-jose-jwt | 9.37.2 | 1 |
| maksimkavalenka/ | 13ad9bb170a0 | nimbus-jose-jwt | 9.37.2 | 1 |
| pmoscode/ | a58f4d762f5c | nimbus-jose-jwt | 9.37.2 | 1 |
| remche/ | 8bcda8a04d3b | nimbus-jose-jwt | 9.37.2 | 1 |