Lestrrat-go vulnerabilities
We track 1 vulnerability in Lestrrat-go products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 9, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Lestrrat-go vulnerabilities
- 7.5 High severity
jwx: NULL Pointer Dereference
jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. Calling `jws.Parse` with a JSON serialized payload where the `signature` field is present while `protected` is absent can lead to a nil pointer dereference