GO-2024-3250
Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt
At a glance
- Published
- Updated
- CVE
- CVE-2024-51744
- Aliases
- GHSA-29wx-vh33-7x7r
Description
Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/golang-jwt/jwt/v4 | introduced 0, fixed 4.5.1 |
References
- https://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r ADVISORY
- https://github.com/golang-jwt/jwt/commit/7b1c1c00a171c6c79bbdb40e4ce7d197060c1c2c FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |