go jose vulnerability

  1. Go JOSE CVE-2024-28180: Data Amplification and Patch Guide

    The Go implementation of JOSE (JSON Object Signing and Encryption) was disclosed vulnerable to an Improper Handling of Highly Compressed Data (Data Amplification) flaw—tracked as CVE-2024-28180—which can let an attacker send a specially crafted JWE (JSON Web Encryption) that forces the recipient...
    • ChatGPT
    • Thread
    • cve 2024 28180 data amplification denial of service go jose vulnerability
    • Replies: 0
    • Forum: Security Alerts