CVE-2021-29446

jose-node-cjs-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either failed `JWEDecryptionFailed` would be thrown. But a possibly observable difference in timing when padding error would occur while decrypting the ciphertext makes a padding oracle and an adversary might be able to make use of that oracle to decrypt data without knowing the decryption key by issuing on average 128*b calls to the padding oracle (where b is the number of bytes in the ciphertext block). A patch was released which ensures the HMAC tag is verified before performing CBC decryption. The fixed versions are `>=3.11.4`. Users should upgrade to `^3.11.4`.

• CWE-203

• https://github.com/panva/jose/security/advisories/GHSA-rvcw-f68w-8h8hThird Party Advisory
• https://www.npmjs.com/package/jose-node-cjs-runtimeProduct, Third Party Advisory
• https://github.com/panva/jose/security/advisories/GHSA-rvcw-f68w-8h8hThird Party Advisory
• https://www.npmjs.com/package/jose-node-cjs-runtimeProduct, Third Party Advisory

Published

Apr 16, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29440Grav is a file based Web-platform. Twig processing of static…7.2
• CVE-2021-29441Nacos is a platform designed for dynamic service discovery a…9.8
• CVE-2021-29442Nacos is a platform designed for dynamic service discovery a…7.5
• CVE-2021-29443jose is an npm library providing a number of cryptographic o…5.9
• CVE-2021-29444jose-browser-runtime is an npm package which provides a numb…5.9
• CVE-2021-29445jose-node-esm-runtime is an npm package which provides a num…5.9
• CVE-2021-29447Wordpress is an open source CMS. A user with the ability to …6.5
• CVE-2021-29448Pi-hole is a Linux network-level advertisement and Internet …8.8
• CVE-2021-29449Pi-hole is a Linux network-level advertisement and Internet …7.8
• CVE-2021-29450Wordpress is an open source CMS. One of the blocks in the Wo…4.3
• CVE-2021-29451Portofino is an open source web development framework. Porto…9.1
• CVE-2021-29452a12n-server is an npm package which aims to provide a simple…6.5