Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/ory/fosite

4 known vulnerabilities (2 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 high, 2 medium
Registry
pkg.go.dev

Advisories 4

  • CVE-2020-15233Medium 6.1

    OAuth2 Redirect URL validity does not respect query parameters and character casing for loopback addresses

    Affected: from 0.30.3, fixed in 0.34.1.

  • CVE-2020-15234Medium 6.1

    Redirect URL matching ignores character casing

    Affected: fixed in 0.34.1.

  • Replay of private_key_jwt possible in ORY Fosite

    Affected: fixed in 0.31.0.

  • Ignored storage errors on token revokation in ORY Fosite

    Affected: fixed in 0.34.0.