CVE-2023-25653: Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-16 · updated 2026-06-17
Weakness: CWE-835

Description

node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0, when using the non-default "fallback" crypto back-end, ECC operations in `node-jose` can trigger a Denial-of-Service (DoS) condition, due to a possible infinite loop in an internal calculation. For some ECC operations, this condition is triggered randomly; for others, it can be triggered by malicious input. The issue has been patched in version 2.2.0. Since this issue is only present in the "fallback" crypto implementation, it can be avoided by ensuring that either WebCrypto or the Node `crypto` module is available in the JS environment where `node-jose` is being run.

Affected products

HackerOne node-jose node module: before 2.2.0 — fixed in 2.2.0

How to fix

Upgrade to a fixed version: HackerOne node-jose node module 2.2.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-25653 or the next vulnerability affects your stack