CVE-2025-22149

creationtimestamp| type| source ---|---|--- 2025-01-09 17:29:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113799577018369526 2025-01-09 18:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdbw6n43c25 2025-01-09 18:16:03+00:00|...

CVE-2025-22149

The CVE-2025-22149 issue affects the JWK Set Go implementation’s auto-caching HTTP client (github.com/MicahParks/jwkset). Before v0.6.0, the local JWK Set cache could overwrite or append during remote refresh instead of performing a full replacement, potentially leaving revoked keys usable if rem...