Executive brief
Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2
Affected products
- Go github.com/lestrrat-go/jwx/v2
- Go github.com/lestrrat-go/jwx
Junglewise Threat Intelligence
CVE-2024-21664: GO-2024-2454 - Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2
CVE-2024-21664 · Severity: low · CVSS 3.1 · Published 2024-01-23
Technologies: github.com/lestrrat-go/jwx/v2 (Go), github.com/lestrrat-go/jwx (Go). Vendors: Go.
Related threats
- GO-2024-2632 - JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx
- GO-2023-2379 - Denial of service due to malicious parameters in github.com/lestrrat-go/jwx
- GO-2023-1859 - Padding oracle vulnerability in github.com/lestrrat-go/jwx
- github.com/lestrrat-go/jwx vulnerable to Potential Padding Oracle Attack