Threats tagged 'ghsa-9mj6-hxhv-w67j'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.5	CVE-2025-63811github.com/dvsekhvalnov/jose2go · jose2go is vulnerable to a JWT bomb attack through its decode function High7.52025-11-12GCVE DatabaseCVE-2025-63811 A vulnerability in jose2go versions prior to 1.7.0 allows an attacker to cause a denial-of-service (DoS) by submitting a crafted JSON Web Encryption (JWE) token with a very high compression ratio. This flaw affects the decode function and can lead to resource exhaustion. Report on CVE-2025-63811 Vulnerability CWE-400 #ghsa-9mj6-hxhv-w67j #go	GCVE Database	2025-11-12

Page 1 of 1