Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2025/12/05 6:12 p.m.10 views

Envoy crashes when JWT authentication is configured with the remote JWKS fetching

Summary Envoy crashes when JWT authentication is configured with the remote JWKS fetching, allowmissingorfailed is enabled, multiple JWT tokens are present in the request headers and the JWKS fetch fails. Details This is caused by a re-entry bug in the JwksFetcherImpl. When the first token's JWKS...

6.5CVSS7.2AI score0.00538EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder