jwx vulnerabilities

1 known vulnerability in jwx from Lestrrat-go. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  jwx: NULL Pointer Dereference

  CVE-2024-21664Jan 9, 2024Lestrrat-go

  jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. Calling `jws.Parse` with a JSON serialized payload where the `signature` field is present while `protected` is absent can lead to a nil pointer dereference