go-jose / go-jose

An implementation of JOSE standards (JWE, JWS, JWT) in Go

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

CVE-2020-9283

mnalsup opened this issue · comments

It appears that golang.org/x/crypto v0.0.0-20190911031432-227b76d455e7 has a known vulnerability. Could we upgrade the version used?

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9283

commented

bump this