JSON Web Token Project JSON Web Token for Go
Approved changes feed: RSS · Atom
cpe:2.3:a:json_web_token_project:json_web_token:-:*:*:*:*:go:*:*part: a version: - update: *
| Vendor | Json Web Token Project (cc80bc45-dcd8-5e93-bdfd-f681122a6aa4) |
|---|---|
| Product | Json Web Token (fbbce660-91d5-5ed5-86a7-566b02895e9a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | go |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/robbert229/jwt |
purl2cpe | 2026-06-01 10:14:03.513321 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-10004 |
vulnerable | 2026-06-08 05:06:24.487479 |
Timing side-channel in github.com/robbert229/jwt
Token validation methods are susceptible to a timing side-channel during HMAC comparison. With a large enough number of requests over a low latency connection, an attacker may use this to determine the expected HMAC.
Published: 2022-12-27T21:13:11.967Z
Updated: 2025-04-11T22:58:21.630Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.