VDB
GO-2022-0945
GO-2022-0945
PUBLISHED
Signature validation bypass in gopkg.in/square/go-jose.v1
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | harbor-fips-2.14 | 0 |
| chainguard | harbor-2.14 | 0 |
| gopkg.in | square/go-jose.v1 | 0 |
Timeline
- Aug 22, 2022 CVE Published
- May 20, 2024 CVE Updated
References
- https://www.openwall.com/lists/oss-security/2016/11/03/1 advisory
- https://github.com/square/go-jose/commit/789a4c4bd4c118f7564954f441b29c153ccd6a96 fix
- https://github.com/square/go-jose/commit/c7581939a3656bb65e89d64da0a52364a33d2507 fix
- https://github.com/square/go-jose/pull/111 fix
- https://github.com/square/go-jose/commit/2c5656adca9909843c4ff50acf1d2cf8f32da7e6 fix