jws

Jan 9, 2024 GO-2024-2632

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Dec 3, 2023 GO-2024-2454 +1 more

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jun 14, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

May 23, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

May 5, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 13, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 8, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 29, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 3, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Feb 22, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jan 23, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jan 12, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jan 12, 2022

retracted

GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ type SignVerifyOption interface

Jan 6, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Dec 22, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ func VerifyAuto(buf []byte, options ...VerifyOption) ([]byte, error)

+ type JWKSetFetchFunc func(string) (jwk.Set, error)

+ func (f JWKSetFetchFunc) Fetch(u string) (jwk.Set, error)

+ type JWKSetFetcher interface

+ Fetch func(string) (jwk.Set, error)

+ type SimpleJWKSetFetcher struct

+ func NewJWKSetFetcher(options ...jwk.FetchOption) *SimpleJWKSetFetcher

+ func (f *SimpleJWKSetFetcher) Fetch(u string) (jwk.Set, error)

type VerifyOption

+ func WithFetchBackoff(b backoff.Policy) VerifyOption

+ func WithFetchWhitelist(wl jwk.Whitelist) VerifyOption

+ func WithHTTPClient(httpcl *http.Client) VerifyOption

+ func WithJWKSetFetcher(f JWKSetFetcher) VerifyOption

Dec 7, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Dec 1, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Nov 13, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Nov 9, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Oct 26, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Oct 21, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ type DecodeCtx interface

+ CollectRaw func() bool

type Message

+ func (m *Message) DecodeCtx() DecodeCtx

+ func (m *Message) SetDecodeCtx(dc DecodeCtx)

type Signature

+ func (s *Signature) DecodeCtx() DecodeCtx

+ func (s *Signature) SetDecodeCtx(dc DecodeCtx)

+ func (s *Signature) UnmarshalJSON(data []byte) error

Sep 26, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ func AlgorithmsForKey(key interface{}) ([]jwa.SignatureAlgorithm, error)

Aug 24, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Aug 4, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

type VerifyOption

+ func WithDetachedPayload(v []byte) VerifyOption

Jul 15, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jul 15, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jul 12, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ type SignOption interface

+ type VerifyOption interface

+ func WithMessage(m *Message) VerifyOption

Jun 1, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 29, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 8, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 2, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 31, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 28, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 12, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 2, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 1, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Feb 22, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Feb 16, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ func RegisterCustomField(name string, object interface{})

Feb 5, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jan 31, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ func RegisterSigner(alg jwa.SignatureAlgorithm, f SignerFactory)

+ func RegisterVerifier(alg jwa.SignatureAlgorithm, f VerifierFactory)

+ func SplitCompactReader(rdr io.Reader) ([]byte, []byte, []byte, error)

+ func SplitCompactString(src string) ([]byte, []byte, []byte, error)

+ func VerifySet(buf []byte, set jwk.Set) ([]byte, error)

+ type ECDSASigner struct

+ func (s ECDSASigner) Algorithm() jwa.SignatureAlgorithm

+ func (s ECDSASigner) Sign(payload []byte, key interface{}) ([]byte, error)

+ type ECDSAVerifier struct

+ func (v ECDSAVerifier) Verify(payload []byte, signature []byte, key interface{}) error

+ type EdDSASigner struct

+ func (s EdDSASigner) Algorithm() jwa.SignatureAlgorithm

+ func (s EdDSASigner) Sign(payload []byte, key interface{}) ([]byte, error)

+ type EdDSAVerifier struct

+ func (v EdDSAVerifier) Verify(payload, signature []byte, key interface{}) (err error)

+ type HMACSigner struct

+ func (s HMACSigner) Algorithm() jwa.SignatureAlgorithm

+ func (s HMACSigner) Sign(payload []byte, key interface{}) ([]byte, error)

+ type HMACVerifier struct

+ func (v HMACVerifier) Verify(payload, signature []byte, key interface{}) (err error)

type Headers

+ Copy func(context.Context, Headers) error

+ Merge func(context.Context, Headers) (Headers, error)

+ Remove func(string) error

type Message

+ func ParseReader(src io.Reader) (*Message, error)

+ func ReadFile(path string, _ ...ReadFileOption) (*Message, error)

+ type RSASigner struct

+ func (s RSASigner) Algorithm() jwa.SignatureAlgorithm

+ func (s RSASigner) Sign(payload []byte, key interface{}) ([]byte, error)

+ type RSAVerifier struct

+ func (v RSAVerifier) Verify(payload, signature []byte, key interface{}) error

+ type ReadFileOption interface

type Signature

+ func (s *Signature) Sign(payload []byte, signer Signer, key interface{}) ([]byte, []byte, error)

+ type Signer interface

+ Algorithm func() jwa.SignatureAlgorithm

+ Sign func([]byte, interface{}) ([]byte, error)

+ func NewSigner(alg jwa.SignatureAlgorithm) (Signer, error)

+ type SignerFactory interface

+ Create func() (Signer, error)

+ type SignerFactoryFn func() (Signer, error)

+ func (fn SignerFactoryFn) Create() (Signer, error)

+ type Verifier interface

+ Verify func(payload []byte, signature []byte, key interface{}) error

+ func NewVerifier(alg jwa.SignatureAlgorithm) (Verifier, error)

+ type VerifierFactory interface

+ Create func() (Verifier, error)

+ type VerifierFactoryFn func() (Verifier, error)

+ func (fn VerifierFactoryFn) Create() (Verifier, error)

Jan 14, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

type Message

+ func NewMessage() *Message

+ func (m *Message) AppendSignature(v *Signature) *Message

+ func (m *Message) ClearSignatures() *Message

+ func (m *Message) SetPayload(v []byte) *Message

+ func (m *Message) UnmarshalJSON(buf []byte) error

+ func (m Message) MarshalJSON() ([]byte, error)

type Signature

+ func NewSignature() *Signature

+ func (s *Signature) SetProtectedHeaders(v Headers) *Signature

+ func (s *Signature) SetPublicHeaders(v Headers) *Signature

+ func (s *Signature) SetSignature(v []byte) *Signature

Jan 11, 2021 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Dec 16, 2020 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Sep 28, 2020 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

type Headers

+ PrivateParams func() map[string]interface{}

Aug 14, 2020 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jul 8, 2020 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

May 7, 2020 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

May 4, 2020 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

May 3, 2020 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ type HeaderPair = mapiter.Pair

type Headers

+ func NewHeaders() Headers

+ AsMap func(ctx context.Context) (map[string]interface{}, error)

+ ContentType func() string

+ Critical func() []string

+ Iterate func(ctx context.Context) Iterator

+ JWK func() jwk.Key

+ JWKSetURL func() string

+ KeyID func() string

+ Type func() string

+ Walk func(ctx context.Context, v Visitor) error

+ X509CertChain func() []string

+ X509CertThumbprint func() string

+ X509CertThumbprintS256 func() string

+ X509URL func() string

+ type Iterator = mapiter.Iterator

+ type Visitor = iter.MapVisitor

+ type VisitorFunc = iter.MapVisitorFunc

Apr 13, 2020 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ func VerifyWithJKUAndContext(ctx context.Context, buf []byte, jwkurl string, options ...Option) ([]byte, error)

type StandardHeaders

+ func (h *StandardHeaders) UnmarshalJSON(buf []byte) error

Feb 26, 2020 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

May 20, 2019 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ const AlgorithmKey

+ const ContentTypeKey

+ const CriticalKey

+ const JWKKey

+ const JWKSetURLKey

+ const KeyIDKey

+ const TypeKey

+ const X509CertChainKey

+ const X509CertThumbprintKey

+ const X509CertThumbprintS256Key

+ const X509URLKey

+ var DefaultJWKAcceptor = JWKAcceptFunc(func(key jwk.Key) bool { ... })

+ func Sign(payload []byte, alg jwa.SignatureAlgorithm, key interface{}, options ...Option) ([]byte, error)

+ func SignLiteral(payload []byte, alg jwa.SignatureAlgorithm, key interface{}, headers []byte) ([]byte, error)

+ func SignMulti(payload []byte, options ...Option) ([]byte, error)

+ func SplitCompact(rdr io.Reader) ([]byte, []byte, []byte, error)

+ func Verify(buf []byte, alg jwa.SignatureAlgorithm, key interface{}) (ret []byte, err error)

+ func VerifyWithJKU(buf []byte, jwkurl string) ([]byte, error)

+ func VerifyWithJWK(buf []byte, key jwk.Key) (payload []byte, err error)

+ func VerifyWithJWKSet(buf []byte, keyset *jwk.Set, keyaccept JWKAcceptFunc) (payload []byte, err error)

+ type EncodedMessage struct

+ Payload string

+ Signatures []*EncodedSignature

+ type EncodedMessageUnmarshalProxy struct

+ Payload string

+ Signatures []*EncodedSignatureUnmarshalProxy

+ type EncodedSignature struct

+ Headers Headers

+ Protected string

+ Signature string

+ type EncodedSignatureUnmarshalProxy struct

+ Headers *StandardHeaders

+ Protected string

+ Signature string

+ type FullEncodedMessage struct

+ type FullEncodedMessageUnmarshalProxy struct

+ type Headers interface

+ Algorithm func() jwa.SignatureAlgorithm

+ Get func(string) (interface{}, bool)

+ Set func(string, interface{}) error

+ type JWKAcceptFunc func(jwk.Key) bool

+ func (f JWKAcceptFunc) Accept(key jwk.Key) bool

+ type JWKAcceptor interface

+ Accept func(jwk.Key) bool

+ type Message struct

+ func Parse(src io.Reader) (m *Message, err error)

+ func ParseString(s string) (*Message, error)

+ func (m Message) LookupSignature(kid string) []*Signature

+ func (m Message) Payload() []byte

+ func (m Message) Signatures() []*Signature

+ type Option = option.Interface

+ func WithHeaders(h Headers) Option

+ func WithSigner(signer sign.Signer, key interface{}, public, protected Headers) Option

+ type PayloadSigner interface

+ Algorithm func() jwa.SignatureAlgorithm

+ ProtectedHeader func() Headers

+ PublicHeader func() Headers

+ Sign func([]byte) ([]byte, error)

+ type Signature struct

+ func (s Signature) ProtectedHeaders() Headers

+ func (s Signature) PublicHeaders() Headers

+ func (s Signature) Signature() []byte

+ type StandardHeaders struct

+ JWSalgorithm jwa.SignatureAlgorithm

+ JWScontentType string

+ JWScritical []string

+ JWSjwk *jwk.Set

+ JWSjwkSetURL string

+ JWSkeyID string

+ JWStyp string

+ JWSx509CertChain []string

+ JWSx509CertThumbprint string

+ JWSx509CertThumbprintS256 string

+ JWSx509URL string

+ func (h *StandardHeaders) Algorithm() jwa.SignatureAlgorithm

+ func (h *StandardHeaders) Get(name string) (interface{}, bool)

+ func (h *StandardHeaders) Set(name string, value interface{}) error