Go/gopkg.in/square/go-jose.v1 CVE-2016-9122: unknown, EPSS 1.97%
Signature validation bypass in gopkg.in/square/go-jose.v1
Action: Upgrade gopkg.in/square/go-jose.v1 to 1.1.0 or later.
go get gopkg.in/square/go-jose.v1@v1.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.0 | - |
Fixed versions
| 1.1.0 |
Sources
- osv: GO-2022-0945
- https://www.openwall.com/lists/oss-security/2016/11/03/1
- https://github.com/square/go-jose/pull/111
- https://github.com/square/go-jose/commit/2c5656adca9909843c4ff50acf1d2cf8f32da7e6
- https://github.com/square/go-jose/commit/789a4c4bd4c118f7564954f441b29c153ccd6a96
- https://github.com/square/go-jose/commit/c7581939a3656bb65e89d64da0a52364a33d2507
CVE-2016-9122 · published · modified · JSON