Golang-jwt vulnerabilities
We track 1 vulnerability in Golang-jwt products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2025.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Golang-jwt vulnerabilities
- 7.5 High severity
jwt: Asymmetric Resource Consumption (Amplification)
golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in th