What’s Vulnerable › Products

lestrrat-go jwx vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your lestrrat-go jwx version is affected

Latest lestrrat-go jwx vulnerabilities

• CVE-2024-28122 — JWX vulnerable to a denial of service attack using compressed JWE message (CVSS 6.8)
• CVE-2024-21664 — Parsing JSON serialized payload without protected field can lead to segfault (CVSS 7.5)
• CVE-2023-49290 — Malicious parameters can cause a denial of service in lestrrat-go/jwx (CVSS 5.3)