jose 6.2.1 → 6.2.3

package/dist/webapi/jwe/flattened/decrypt.js

@@ -134,7 +134,11 @@ export async function flattenedDecrypt(jwe, key, options) {
             (!Number.isSafeInteger(maxDecompressedLength) || maxDecompressedLength < 1)) {
             throw new TypeError('maxDecompressedLength must be 0, a positive safe integer, or Infinity');
         }
-        result.plaintext = await decompress(plaintext, maxDecompressedLength);
+        result.plaintext = await decompress(plaintext, maxDecompressedLength).catch((cause) => {
+            if (cause instanceof JWEInvalid)
+                throw cause;
+            throw new JWEInvalid('Failed to decompress plaintext', { cause });
+        });
     }
     if (jwe.protected !== undefined) {
         result.protectedHeader = parsedProt;

package/dist/webapi/jwe/flattened/encrypt.js

@@ -133,7 +133,9 @@ export class FlattenedEncrypt {
         }
         let plaintext = this.#plaintext;
         if (joseHeader.zip === 'DEF') {
-            plaintext = await compress(plaintext);
+            plaintext = await compress(plaintext).catch((cause) => {
+                throw new JWEInvalid('Failed to compress plaintext', { cause });
+            });
         }
         const { ciphertext, tag, iv } = await encrypt(enc, plaintext, cek, this.#iv, additionalData);
         const jwe = {

package/dist/webapi/jwks/remote.js

@@ -9,7 +9,7 @@ function isCloudflareWorkers() {
 let USER_AGENT;
 if (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {
     const NAME = 'jose';
-    const VERSION = 'v6.2.1';
+    const VERSION = 'v6.2.3';
     USER_AGENT = `${NAME}/${VERSION}`;
 }
 export const customFetch = Symbol();

package/dist/webapi/lib/deflate.js

@@ -9,8 +9,8 @@ export async function compress(input) {
     supported('CompressionStream');
     const cs = new CompressionStream('deflate-raw');
     const writer = cs.writable.getWriter();
-    writer.write(input);
-    writer.close();
+    writer.write(input).catch(() => { });
+    writer.close().catch(() => { });
     const chunks = [];
     const reader = cs.readable.getReader();
     for (;;) {
@@ -25,8 +25,8 @@ export async function decompress(input, maxLength) {
     supported('DecompressionStream');
     const ds = new DecompressionStream('deflate-raw');
     const writer = ds.writable.getWriter();
-    writer.write(input);
-    writer.close();
+    writer.write(input).catch(() => { });
+    writer.close().catch(() => { });
     const chunks = [];
     let length = 0;
     const reader = ds.readable.getReader();

package/dist/webapi/lib/pbes2kw.js

@@ -17,6 +17,9 @@ async function deriveKey(p2s, alg, p2c, key) {
     if (!(p2s instanceof Uint8Array) || p2s.length < 8) {
         throw new JWEInvalid('PBES2 Salt Input must be 8 or more octets');
     }
+    if (!Number.isSafeInteger(p2c) || Math.sign(p2c) !== 1) {
+        throw new JWEInvalid('PBES2 Count Input must be a positive integer');
+    }
     const salt = concatSalt(alg, p2s);
     const keylen = parseInt(alg.slice(13, 16), 10);
     const subtleAlg = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "6.2.1",
+  "version": "6.2.3",
   "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
   "keywords": [
     "akp",