CVE 2023-31582

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.

See the

CVE page on Mitre.org for more details.

References