Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/01/09 4:18 p.m.52 views

Parsing JSON serialized payload without protected field can lead to segfault

Summary Calling jws.Parse with a JSON serialized payload where the signature field is present while protected is absent can lead to a nil pointer dereference. Details This seems to also affect other functions that calls Parse internally, like jws.Verify. My understanding of these functions from t...

7.5CVSS7AI score0.00864EPSS
SaveExploits1References6Affected Software2
Rows per page
Query Builder