| id: GO-2024-3250 |
| modules: |
| - module: github.com/golang-jwt/jwt/v4 |
| versions: |
| - fixed: 4.5.1 |
| vulnerable_at: 4.5.0 |
| packages: |
| - package: github.com/golang-jwt/jwt/v4 |
| symbols: |
| - Parser.ParseWithClaims |
| derived_symbols: |
| - Parse |
| - ParseWithClaims |
| - Parser.Parse |
| summary: |- |
| Improper error handling in ParseWithClaims and bad documentation may cause |
| dangerous situations in github.com/golang-jwt/jwt |
| cves: |
| - CVE-2024-51744 |
| ghsas: |
| - GHSA-29wx-vh33-7x7r |
| references: |
| - advisory: https://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r |
| - fix: https://github.com/golang-jwt/jwt/commit/7b1c1c00a171c6c79bbdb40e4ce7d197060c1c2c |
| source: |
| id: GHSA-29wx-vh33-7x7r |
| created: 2024-11-08T12:21:43.987103-05:00 |
| review_status: REVIEWED |
