Lucene search
+L

22 matches found

OSV
OSV
added 2024/11/04 9:47 p.m.17 views

CVE-2024-51744 Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

3.1CVSS6.6AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2024/11/04 9:47 p.m.39 views

CVE-2024-51744

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

3.1CVSS6.3AI score0.0051EPSS
SaveExploits0
Rows per page
Query Builder