Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/dvsekhvalnov/jose2go

go

Package jose provides high level functions for producing (signing, encrypting and compressing) or consuming (decoding) Json Web Tokens using Java Object Signing and Encryption spec

View on github.com · View on proxy.golang.org

Security Advisories for github.com/dvsekhvalnov/jose2go in go

High
7 days ago

jose2go is vulnerable to a JWT bomb attack through its decode function GSA_kwCzR0hTQS05bWo2LWh4aHYtdzY3as4ABOe8

go github.com/dvsekhvalnov/jose2go
Moderate
over 1 year ago

jose2go vulnerable to denial of service via large p2c value GSA_kwCzR0hTQS02Mjk0LTZyZ3AtZnI3cs4AA5mt

go github.com/dvsekhvalnov/jose2go
Moderate
almost 2 years ago

Denial of service when decrypting attack controlled input in github.com/dvsekhvalnov/jose2go GSA_kwCzR0hTQS1taHBxLTk2MzgteDZwd84AA38h

go github.com/dvsekhvalnov/jose2go

Filter by Severity

Moderate 2 High 1