VDB
GO-2023-2379
GO-2023-2379
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Denial of service due to malicious parameters in github.com/lestrrat-go/jwx
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | lestrrat-go/jwx/v2 | 0, 0 |
| chainguard | gitsign | 0, 0 |
| wolfi | vexctl | 0, 0, 0 |
| wolfi | falcoctl | 0, 0, 0 |
| wolfi | tekton-chains | 0, 0, 0 |
| chainguard | falcoctl | 0, 0 |
| chainguard | cosign-fips | 0, 0 |
| chainguard | kubescape | 0, 0, 0 |
| wolfi | gitsign | 0, 0, 0 |
| chainguard | tekton-chains | 0, 0 |
| chainguard | vexctl | 0, 0 |
| chainguard | falcoctl-fips | 0, 0 |
| github.com | lestrrat-go/jwx | 0, 0 |
| wolfi | kubescape | 0, 0, 0 |
Timeline
- Dec 11, 2023 CVE Published
- Feb 4, 2026 CVE Updated