Fedora 38 : golang-github-nats-io / golang-github-nats-io-jwt-2 / etc (2023-66966ae3d0)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-66966ae3d0 advisory. A malicious HTTP/2 client which rapidly creates r ...

Continue Reading
[SECURITY] Fedora 38 Update: golang-github-nats-io-jwt-2-2.5.3-1.fc38

JWT tokens signed using NKeys for Ed25519 for the NATS...Read More ...

Continue Reading
CVE-2023-44252

** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker t ...

Continue Reading
Insertion of Sensitive Information into Log

Impact If successful login attempts are recorded, the raw tokens are stored in the log table. If a malicious person somehow views the data in the log table, he or she can obtain a raw token, which can ...

Continue Reading
[SECURITY] Fedora 38 Update: golang-github-nats-io-jwt-2-2.5.3-1.fc38

JWT tokens signed using NKeys for Ed25519 for the NATS...Read More ...

Continue Reading
[SECURITY] Fedora 39 Update: golang-github-nats-io-jwt-2-2.5.3-1.fc39

JWT tokens signed using NKeys for Ed25519 for the NATS...Read More ...

Continue Reading
Improper JWT Signature Validation in SAP Security Services Library

Impact SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) allows under certain conditions an escalation of privileges. On successful exploitation, an un ...

Continue Reading
CVE-2023-49290

lestrrat-go/jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. A p2c parameter set too high in JWE's algorithm PBES2-* could lead to a denial ...

Continue Reading

Back to Main

Subscribe for the latest news: