CVE-2024-28122
4 advisories.
Go/github.com/lestrrat-go/jwx/v2 CVE-2024-28122: medium 6.8, EPSS 0.57%
JWX vulnerable to a denial of service attack using compressed JWE message
Action: Upgrade github.com/lestrrat-go/jwx/v2 to 2.0.21 or later.
go get github.com/lestrrat-go/jwx/v2@v2.0.21Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.21 | - |
Fixed versions
| 2.0.21 |
Sources
- osv: GHSA-hj3v-m684-v259
- https://github.com/lestrrat-go/jwx/security/advisories/GHSA-hj3v-m684-v259
- https://nvd.nist.gov/vuln/detail/CVE-2024-28122
- https://github.com/lestrrat-go/jwx/commit/d01027d74c7376d66037a10f4f64af9af26a7e34
- https://github.com/lestrrat-go/jwx/commit/d43f2ceb7f0c13714dfe8854d6439766e86faa76
- https://github.com/lestrrat-go/jwx
- https://github.com/lestrrat-go/jwx/releases/tag/v1.2.29
- https://github.com/lestrrat-go/jwx/releases/tag/v2.0.21
CVE-2024-28122 · published · modified · JSON
Go/github.com/lestrrat-go/jwx CVE-2024-28122: medium 6.8, EPSS 0.57%
JWX vulnerable to a denial of service attack using compressed JWE message
Action: Upgrade github.com/lestrrat-go/jwx to 1.2.29 or later.
go get github.com/lestrrat-go/jwx@v1.2.29Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.29 | - |
Fixed versions
| 1.2.29 |
Sources
- osv: GHSA-hj3v-m684-v259#Go/github.com/lestrrat-go/jwx
- https://github.com/lestrrat-go/jwx/security/advisories/GHSA-hj3v-m684-v259
- https://nvd.nist.gov/vuln/detail/CVE-2024-28122
- https://github.com/lestrrat-go/jwx/commit/d01027d74c7376d66037a10f4f64af9af26a7e34
- https://github.com/lestrrat-go/jwx/commit/d43f2ceb7f0c13714dfe8854d6439766e86faa76
- https://github.com/lestrrat-go/jwx
- https://github.com/lestrrat-go/jwx/releases/tag/v1.2.29
- https://github.com/lestrrat-go/jwx/releases/tag/v2.0.21
CVE-2024-28122 · published · modified · JSON
Go/github.com/lestrrat-go/jwx CVE-2024-28122: unknown, EPSS 0.57%
JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx
Action: Upgrade github.com/lestrrat-go/jwx to 1.2.29 or later.
go get github.com/lestrrat-go/jwx@v1.2.29Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.29 | - |
Fixed versions
| 1.2.29 |
Sources
- osv: GO-2024-2632
- https://github.com/lestrrat-go/jwx/security/advisories/GHSA-hj3v-m684-v259
- https://github.com/lestrrat-go/jwx/commit/d01027d74c7376d66037a10f4f64af9af26a7e34
- https://github.com/lestrrat-go/jwx/commit/d43f2ceb7f0c13714dfe8854d6439766e86faa76
- https://github.com/lestrrat-go/jwx/releases/tag/v1.2.29
- https://github.com/lestrrat-go/jwx/releases/tag/v2.0.21
CVE-2024-28122 · published · modified · JSON
Go/github.com/lestrrat-go/jwx/v2 CVE-2024-28122: unknown, EPSS 0.57%
JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx
Action: Upgrade github.com/lestrrat-go/jwx/v2 to 2.0.21 or later.
go get github.com/lestrrat-go/jwx/v2@v2.0.21Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.21 | - |
Fixed versions
| 2.0.21 |
Sources
- osv: GO-2024-2632#Go/github.com/lestrrat-go/jwx/v2
- https://github.com/lestrrat-go/jwx/security/advisories/GHSA-hj3v-m684-v259
- https://github.com/lestrrat-go/jwx/commit/d01027d74c7376d66037a10f4f64af9af26a7e34
- https://github.com/lestrrat-go/jwx/commit/d43f2ceb7f0c13714dfe8854d6439766e86faa76
- https://github.com/lestrrat-go/jwx/releases/tag/v1.2.29
- https://github.com/lestrrat-go/jwx/releases/tag/v2.0.21
CVE-2024-28122 · published · modified · JSON