{"action":"Upgrade github.com/lestrrat-go/jwx to 1.2.26 or later.","affected":[{"fixed":"1.2.26","introduced":"0"}],"component":"github.com/lestrrat-go/jwx","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.2.26"],"ghsa_id":"GHSA-rm8v-mxj3-5rmq","id":"tcs_01M5KFZDJ17ST2VCFTQJRWWKCN","modified_at":"2024-05-20T16:03:47Z","published_at":"2023-06-22T16:36:11Z","references":["https://osv.dev/vulnerability/GO-2023-1859","https://github.com/lestrrat-go/jwx/commit/6c41e3822485fc7e11dd70b4b0524b075d66b103","https://github.com/lestrrat-go/jwx/commit/d9ddbc8e5009cfdd8c28413390b67afa7f576dd6"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1859","url":"https://osv.dev/vulnerability/GO-2023-1859"}],"summary":"Padding oracle vulnerability in github.com/lestrrat-go/jwx"}