An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/lestrrat-go/jwx

go

Package jwx contains tools that deal with the various JWx (JOSE) technologies such as JWT, JWS, JWE, etc in Go.

View on github.com · View on proxy.golang.org

Security Advisories for github.com/lestrrat-go/jwx in go

Moderate
over 2 years ago

JWX vulnerable to a denial of service attack using compressed JWE message GSA_kwCzR0hTQS1oajN2LW02ODQtdjI1Oc4AA52y

go github.com/lestrrat-go/jwx, github.com/lestrrat-go/jwx/v2
Moderate
over 2 years ago

lestrrat-go/jwx's malicious parameters in JWE can cause a DOS GSA_kwCzR0hTQS03Zjl4LWd3ODUtOGdyZs4AA3lA

go github.com/lestrrat-go/jwx/v2, github.com/lestrrat-go/jwx
Moderate
about 3 years ago

github.com/lestrrat-go/jwx vulnerable to Potential Padding Oracle Attack GSA_kwCzR0hTQS1ybTh2LW14ajMtNXJtcc4AAz3K

go github.com/lestrrat-go/jwx, github.com/lestrrat-go/jwx/v2

Filter by Severity