Go/github.com/robbert229/jwt CVE-2015-10004: high 7.5, EPSS 0.81%

Timing side-channel in github.com/robbert229/jwt

Action: Upgrade github.com/robbert229/jwt to 0.0.0-20170426191122-ca1404ee6e83 or later.

go get github.com/robbert229/jwt@v0.0.0-20170426191122-ca1404ee6e83

Affected

Fixed versions

Sources

• osv: GO-2020-0023
• nvd: CVE-2015-10004
• https://github.com/robbert229/jwt/commit/ca1404ee6e83fcbafb66b09ed0d543850a15b654
• https://github.com/robbert229/jwt/issues/12

CVE-2015-10004 · published 2021-04-14T20:04:52Z · modified 2024-05-20T16:03:47Z · JSON