CVE-2024-28122

An uncontrolled resource consumption vulnerability was found in jwx. This flaw allows an attacker with a trusted public key to cause a denial of service condition by crafting a malicious JWE token with an exceptionally high compression ratio...

JWX Security Vulnerabilities

lestrrat-go jwx is a library for lestrrat-go individual developers. A security vulnerability exists in JWX versions 1.2.29 and prior to 2.0.21, which originated from a vulnerability that allows an attacker in possession of a trusted public key to cause a denial of service by crafting malicious JS...