CVE-2016-9122
2 advisories.
Go/gopkg.in/square/go-jose.v1 CVE-2016-9122: high 7.5
Go JOSE Signature Validation Bypass
Action: Upgrade gopkg.in/square/go-jose.v1 to 1.1.0 or later.
go get gopkg.in/square/go-jose.v1@v1.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.0 | - |
Fixed versions
| 1.1.0 |
Sources
- osv: GHSA-77gc-fj98-665h
- https://nvd.nist.gov/vuln/detail/CVE-2016-9122
- https://github.com/square/go-jose/pull/111
- https://github.com/square/go-jose/commit/2c5656adca9909843c4ff50acf1d2cf8f32da7e6
- https://github.com/square/go-jose/commit/789a4c4bd4c118f7564954f441b29c153ccd6a96
- https://github.com/square/go-jose/commit/c7581939a3656bb65e89d64da0a52364a33d2507
- https://hackerone.com/reports/169629
- https://github.com/square/go-jose
- https://www.openwall.com/lists/oss-security/2016/11/03/1
- http://www.openwall.com/lists/oss-security/2016/11/03/1
CVE-2016-9122 · published · modified · JSON
Go/gopkg.in/square/go-jose.v1 CVE-2016-9122: unknown
Signature validation bypass in gopkg.in/square/go-jose.v1
Action: Upgrade gopkg.in/square/go-jose.v1 to 1.1.0 or later.
go get gopkg.in/square/go-jose.v1@v1.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.0 | - |
Fixed versions
| 1.1.0 |
Sources
- osv: GO-2022-0945
- https://www.openwall.com/lists/oss-security/2016/11/03/1
- https://github.com/square/go-jose/pull/111
- https://github.com/square/go-jose/commit/2c5656adca9909843c4ff50acf1d2cf8f32da7e6
- https://github.com/square/go-jose/commit/789a4c4bd4c118f7564954f441b29c153ccd6a96
- https://github.com/square/go-jose/commit/c7581939a3656bb65e89d64da0a52364a33d2507
CVE-2016-9122 · published · modified · JSON