jwa

Jul 28, 2024

Changes in this version

+ func RegisterKeyEncryptionAlgorithmWithOptions(v KeyEncryptionAlgorithm, options ...RegisterAlgorithmOption)

+ func RegisterSignatureAlgorithmWithOptions(v SignatureAlgorithm, options ...RegisterAlgorithmOption)

type KeyEncryptionAlgorithm

+ const RSA_OAEP_384

+ const RSA_OAEP_512

+ type Option = option.Interface

+ type RegisterAlgorithmOption interface

+ func WithSymmetricAlgorithm(v bool) RegisterAlgorithmOption

type SignatureAlgorithm

+ func (v SignatureAlgorithm) IsSymmetric() bool

Feb 19, 2024 GO-2024-2632

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jan 9, 2024 GO-2024-2632

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Dec 3, 2023 GO-2024-2454 +1 more

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Nov 20, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Oct 30, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Oct 19, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Oct 17, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Sep 26, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Aug 10, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jun 14, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jun 12, 2023 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ func RegisterCompressionAlgorithm(v CompressionAlgorithm)

+ func RegisterContentEncryptionAlgorithm(v ContentEncryptionAlgorithm)

+ func RegisterEllipticCurveAlgorithm(v EllipticCurveAlgorithm)

+ func RegisterKeyEncryptionAlgorithm(v KeyEncryptionAlgorithm)

+ func RegisterKeyType(v KeyType)

+ func RegisterSignatureAlgorithm(v SignatureAlgorithm)

+ func UnregisterCompressionAlgorithm(v CompressionAlgorithm)

+ func UnregisterContentEncryptionAlgorithm(v ContentEncryptionAlgorithm)

+ func UnregisterEllipticCurveAlgorithm(v EllipticCurveAlgorithm)

+ func UnregisterKeyEncryptionAlgorithm(v KeyEncryptionAlgorithm)

+ func UnregisterKeyType(v KeyType)

+ func UnregisterSignatureAlgorithm(v SignatureAlgorithm)

Mar 21, 2023 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Nov 25, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Nov 15, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Aug 25, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Aug 11, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jul 19, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jun 13, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

May 23, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

May 6, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 24, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ type CompressionAlgorithm string

+ const Deflate

+ const NoCompress

+ func CompressionAlgorithms() []CompressionAlgorithm

+ func (v *CompressionAlgorithm) Accept(value interface{}) error

+ func (v CompressionAlgorithm) String() string

+ type ContentEncryptionAlgorithm string

+ const A128CBC_HS256

+ const A128GCM

+ const A192CBC_HS384

+ const A192GCM

+ const A256CBC_HS512

+ const A256GCM

+ func ContentEncryptionAlgorithms() []ContentEncryptionAlgorithm

+ func (v *ContentEncryptionAlgorithm) Accept(value interface{}) error

+ func (v ContentEncryptionAlgorithm) String() string

+ type EllipticCurveAlgorithm string

+ const Ed25519

+ const Ed448

+ const InvalidEllipticCurve

+ const P256

+ const P384

+ const P521

+ const X25519

+ const X448

+ func EllipticCurveAlgorithms() []EllipticCurveAlgorithm

+ func (v *EllipticCurveAlgorithm) Accept(value interface{}) error

+ func (v EllipticCurveAlgorithm) String() string

+ type InvalidKeyAlgorithm string

+ func (InvalidKeyAlgorithm) Accept(_ interface{}) error

+ func (s InvalidKeyAlgorithm) String() string

+ type KeyAlgorithm interface

+ String func() string

+ func KeyAlgorithmFrom(v interface{}) KeyAlgorithm

+ type KeyEncryptionAlgorithm string

+ const A128GCMKW

+ const A128KW

+ const A192GCMKW

+ const A192KW

+ const A256GCMKW

+ const A256KW

+ const DIRECT

+ const ECDH_ES

+ const ECDH_ES_A128KW

+ const ECDH_ES_A192KW

+ const ECDH_ES_A256KW

+ const PBES2_HS256_A128KW

+ const PBES2_HS384_A192KW

+ const PBES2_HS512_A256KW

+ const RSA1_5

+ const RSA_OAEP

+ const RSA_OAEP_256

+ func KeyEncryptionAlgorithms() []KeyEncryptionAlgorithm

+ func (v *KeyEncryptionAlgorithm) Accept(value interface{}) error

+ func (v KeyEncryptionAlgorithm) IsSymmetric() bool

+ func (v KeyEncryptionAlgorithm) String() string

+ type KeyType string

+ const EC

+ const InvalidKeyType

+ const OKP

+ const OctetSeq

+ const RSA

+ func KeyTypes() []KeyType

+ func (v *KeyType) Accept(value interface{}) error

+ func (v KeyType) String() string

+ type SignatureAlgorithm string

+ const ES256

+ const ES256K

+ const ES384

+ const ES512

+ const EdDSA

+ const HS256

+ const HS384

+ const HS512

+ const NoSignature

+ const PS256

+ const PS384

+ const PS512

+ const RS256

+ const RS384

+ const RS512

+ func SignatureAlgorithms() []SignatureAlgorithm

+ func (v *SignatureAlgorithm) Accept(value interface{}) error

+ func (v SignatureAlgorithm) String() string

Apr 16, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 9, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 3, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx