Описание
OpenPubkey Vulnerable to Authentication Bypass
Impact
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.
Patches
Upgrade to v0.10.0 or greater. This vulnerability is not present in versions of OpenPubkey after v0.9.0.
References
Пакеты
Наименование
github.com/openpubkey/openpubkey
go
Затронутые версииВерсия исправления
< 0.10.0
0.10.0
Связанные уязвимости
CVSS3: 9.8
ubuntu
9 месяцев назад
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.
CVSS3: 9.8
nvd
9 месяцев назад
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.
CVSS3: 9.8
debian
9 месяцев назад
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerabil ...