- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 1 · 1 low
- Registry
- pkg.go.dev
Advisories 1
- CVE-2025-22149Low 2.1
JWK Set's HTTP client only overwrites and appends JWK to local cache during refresh
Affected: from 0.5.0, fixed in 0.6.0.