Lucene search

K
githubGitHub Advisory DatabaseGHSA-3FX4-7F69-5MMG
HistoryJun 23, 2021 - 5:14 p.m.

Integer Overflow in go-jose

2021-06-2317:14:12
CWE-190
GitHub Advisory Database
github.com
25

0.001 Low

EPSS

Percentile

46.7%

go-jose before 1.0.5 suffers from a CBC-HMAC integer overflow on 32-bit architectures. An integer overflow could lead to authentication bypass for CBC-HMAC encrypted ciphertexts on 32-bit architectures.

CPENameOperatorVersion
github.com/square/go-joselt1.0.5

0.001 Low

EPSS

Percentile

46.7%