Export limit exceeded: 425471 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2020-26160

jwt-go: access restriction bypass vulnerability

jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails, "" is the value of aud. This is a security problem if the JWT token is presented to a service that lacks its own audience check.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Jwt-go Project Redhat
Products
Jwt-go Container Native Virtualization Cryostat and 3 more