Skip to content

Lestrrat-go Jwx vulnerabilities

lestrrat-go jwxJWX vulnerable to a denial of service attack using compressed JWE messageCVE-2024-28122Fix available6.8 MediumMarch 8, 2024
lestrrat-go jwxParsing JSON serialized payload without protected field can lead to segfaultCVE-2024-21664Fix available4.3 MediumJanuary 9, 2024
lestrrat-go jwxMalicious parameters can cause a denial of service in lestrrat-go/jwxCVE-2023-49290Fix available5.3 MediumDecember 4, 2023