Lestrrat-Go

3 CVEs across 1 Lestrrat-Go products. Browse Lestrrat-Go vulnerabilities, severities, and proof-of-concept exploits.

Lestrrat-Go products with known CVEs

ProductCVEs
Jwx3
Lestrrat-Go CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-28122Medium6.82024-03-09 JWX is Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. This vulnerability allows an attacker with a trusted pu…
CVE-2024-21664Medium4.32024-01-09jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. Calling `jws.Parse` with a JSON serialized payload whe…
CVE-2023-49290Medium5.32023-12-05lestrrat-go/jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. A p2c parameter set too high in JWE's algo…