jose 3.11.4

npm / jose / 3.11.4 source ↗

Bug Fixes

• defer AES CBC w/ HMAC decryption after tag verification passes (579485c), fixes CVE-2021-29443, CVE-2021-29444 , CVE-2021-29445, and CVE-2021-29446