github.com/lestrrat-go/jwx
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| JWX vulnerable to a denial of service attack using compressed JWE message | github.com/lestrrat-go/jwx/v2github.com/lestrrat-go/jwx | Go | Medium | Fix reported | |
| Parsing JSON serialized payload without protected field can lead to segfault | github.com/lestrrat-go/jwx/v2github.com/lestrrat-go/jwx | GoRed Hat | Medium | Fix reported | |
| lestrrat-go/jwx's malicious parameters in JWE can cause a DOS | github.com/lestrrat-go/jwx/v2github.com/lestrrat-go/jwx | GoRed Hat | Medium | Fix reported | |
| github.com/lestrrat-go/jwx vulnerable to Potential Padding Oracle Attack | github.com/lestrrat-go/jwx/v2github.com/lestrrat-go/jwx | Go | Medium | Fix reported |