Executive brief
Denial of service due to malicious parameters in github.com/lestrrat-go/jwx
Affected products
- Go github.com/lestrrat-go/jwx/v2
- Go github.com/lestrrat-go/jwx
Junglewise Threat Intelligence
CVE-2023-49290: GO-2023-2379 - Denial of service due to malicious parameters in github.com/lestrrat-go/jwx
CVE-2023-49290 · Severity: low · CVSS 3.1 · Published 2023-12-11
Technologies: github.com/lestrrat-go/jwx/v2 (Go), github.com/lestrrat-go/jwx (Go). Vendors: Go.
Related threats
- GO-2024-2632 - JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx
- GO-2024-2454 - Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2
- GO-2023-1859 - Padding oracle vulnerability in github.com/lestrrat-go/jwx
- github.com/lestrrat-go/jwx vulnerable to Potential Padding Oracle Attack