Skip to content
OpenAdvisories

Package · Go

github.com/MicahParks/jwkset

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.1
    CVE-2025-22149

    JWK Set's HTTP client only overwrites and appends JWK to local cache during refresh

    JWK Set (JSON Web Key Set) is a JWK and JWK Set Go implementation. Prior to 0.6.0, the project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or a…

    MicahParks jwkset github.com/MicahParks/jwkset Go