Executive brief
github.com/lestrrat-go/jwx vulnerable to Potential Padding Oracle Attack
Affected products
- Go github.com/lestrrat-go/jwx/v2
- Go github.com/lestrrat-go/jwx
Junglewise Threat Intelligence
github.com/lestrrat-go/jwx vulnerable to Potential Padding Oracle Attack
Severity: info ยท Published 2023-06-14
Technologies: github.com/lestrrat-go/jwx/v2 (Go), github.com/lestrrat-go/jwx (Go). Vendors: Go.
Related threats
- GO-2024-2632 - JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx
- GO-2024-2454 - Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2
- GO-2023-2379 - Denial of service due to malicious parameters in github.com/lestrrat-go/jwx
- GO-2023-1859 - Padding oracle vulnerability in github.com/lestrrat-go/jwx