jose

Jan 9, 2024 GO-2024-2632

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Dec 3, 2023 GO-2024-2454 +1 more

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jun 14, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ type AlgorithmSet struct

+ func Algorithms(ctx context.Context, t *testing.T) (*AlgorithmSet, error)

+ func NewAlgorithmSet() *AlgorithmSet

+ func (set *AlgorithmSet) Add(s string)

+ func (set *AlgorithmSet) Has(s string) bool

May 23, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

May 5, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 13, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 8, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 29, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 3, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Feb 22, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jan 23, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jan 12, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jan 12, 2022

retracted

GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jan 6, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Dec 22, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Dec 7, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Dec 1, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Nov 13, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Nov 9, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Oct 26, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Oct 21, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Sep 26, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Aug 24, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Aug 4, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jul 15, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jul 15, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jul 12, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jun 1, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 29, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 8, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 2, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 31, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 28, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 12, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 2, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 1, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Feb 22, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ func SignJws(ctx context.Context, t *testing.T, payload []byte, keyfile string, ...) (string, func(), error)

+ func VerifyJws(ctx context.Context, t *testing.T, cfile, kfile string) ([]byte, error)

Feb 16, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Feb 5, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jan 31, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jan 14, 2021 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jan 11, 2021 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Dec 16, 2020 GO-2023-1859 +2 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ func Available() bool

+ func DecryptJwe(ctx context.Context, t *testing.T, cfile, kfile string) ([]byte, error)

+ func EncryptJwe(ctx context.Context, t *testing.T, payload []byte, alg string, keyfile string, ...) (string, func(), error)

+ func ExecutablePath() string

+ func FmtJwe(ctx context.Context, t *testing.T, data []byte) ([]byte, error)

+ func GenerateJwk(ctx context.Context, t *testing.T, template string) (string, func(), error)

+ func RunJoseCommand(ctx context.Context, t *testing.T, args []string, out io.Writer) error

+ func SetExecutable(path string)