Skip to content
OpenAdvisories

Package · Wolfi

gitlab-kas-19.5

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Go JOSE: DoS when parsing JWKs that contain RSA keys

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.6, go-jose parses attacker-c…