| id: GO-2023-1859 |
| modules: |
| - module: github.com/lestrrat-go/jwx |
| versions: |
| - fixed: 1.2.26 |
| vulnerable_at: 1.2.25 |
| packages: |
| - package: github.com/lestrrat-go/jwx/jwe/internal/aescbc |
| symbols: |
| - unpad |
| derived_symbols: |
| - Hmac.Open |
| - module: github.com/lestrrat-go/jwx/v2 |
| versions: |
| - fixed: 2.0.11-0.20230614080639-c8b6bec919a1 |
| vulnerable_at: 2.0.10 |
| packages: |
| - package: github.com/lestrrat-go/jwx/v2/jwe/internal/aescbc |
| symbols: |
| - unpad |
| derived_symbols: |
| - Hmac.Open |
| summary: Padding oracle vulnerability in github.com/lestrrat-go/jwx |
| description: |- |
| AES-CBC decryption is vulnerable to a timing attack which may permit an attacker |
| to recover the plaintext of JWE data. |
| ghsas: |
| - GHSA-rm8v-mxj3-5rmq |
| references: |
| - fix: https://github.com/lestrrat-go/jwx/commit/6c41e3822485fc7e11dd70b4b0524b075d66b103 |
| - fix: https://github.com/lestrrat-go/jwx/commit/d9ddbc8e5009cfdd8c28413390b67afa7f576dd6 |
