Описание
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.
Ссылки
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 0.10.0 (исключая)
cpe:2.3:a:openpubkey:openpubkey:*:*:*:*:*:*:*:*
EPSS
Процентиль: 12%
0.0004
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-305
CWE-347
Связанные уязвимости
CVSS3: 9.8
ubuntu
9 месяцев назад
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.
CVSS3: 9.8
debian
9 месяцев назад
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerabil ...
EPSS
Процентиль: 12%
0.0004
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-305
CWE-347