Jwt Go Project vulnerabilities

1 vulnerability

Known vulnerabilities in Jwt Go Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
PrioritiseCVE-2020-26160jwt-go_project · jwt-go +17 morejwt-go_project jwt-gojwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails, "" is the value of aud. This is a security problem if the JWT token is presented to a service that lacks its own audience check.CVSS7.5HighEPSS2.16%