VDB
BDU%3A2024-01954
BDU%3A2024-01954
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Record from fstec · Published March 14, 2024
Risk scores
CVSS 2.0
6.099999904632568
Affected products
| Vendor | Product | Versions |
|---|---|---|
| АО «НТЦ ИТ РОСА», Сообщество свободного программного обеспечения, ООО «НЦПР» | ROSA Virtualization (запись в едином реестре российских программ №5091), jose, jose-node-cjs-runtime, jose-node-esm-runtime, ROSA Virtualization 3.0 (запись в едином реестре российских программ №21308), МСВСфера |
Timeline
- Mar 14, 2024 CVE Published
- Nov 19, 2025 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln BDU%3A2024-01954
vulnetix vdb fixes BDU%3A2024-01954
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/BDU%253A2024-01954/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://github.com/panva/jose/commit/02a65794f7873cdaf12e81e80ad076fcdc4a9314 advisory
- https://github.com/panva/jose/commit/1b91d88d2f8233f3477a5f4579aa5f8057b2ee8b advisory
- https://github.com/panva/jose/security/advisories/GHSA-hhhv-q57g-882q advisory
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2888 advisory
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2878 advisory
- https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9181?lang=ru advisory