Junglewise Threat Intelligence

GO-2023-2334 - Denial of service via decryption of malicious PBES2 JWE objects in github.com/go-jose/go-jose/v3

Severity: info · Published 2023-11-21

Technologies: github.com/square/go-jose (Go), github.com/go-jose/go-jose/v3 (Go). Vendors: Go.

Executive brief

Denial of service via decryption of malicious PBES2 JWE objects in github.com/go-jose/go-jose/v3

Affected products

  • Go github.com/square/go-jose
  • Go github.com/go-jose/go-jose/v3

Related threats