4 matches found
golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing
A flaw was found in the golang-jwt implementation of JSON Web Tokens JWT. In affected versions, a malicious request with specially crafted Authorization header data may trigger an excessive consumption of resources on the host system. This issue can cause significant performance degradation or an...
7.5CVSS6.2AI score0.00811EPSS
SaveExploits0References7
CVE-2015-2297
nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...
7.5CVSS7.3AI score0.01787EPSS
SaveExploits0References1
20