Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
lestrrat-go/jwx
develop/v4 @ 5a93764
62
Fixes
3
CVEs
HIGH
Peak severity
57.7%
Coverage
Highlights
Auth Bypass: 31 prior fixes. Scrutinize any change in this area.
jws: most-fixed (17 issues). Treat as high-risk during review.
33 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Critical 'crit' (Critical) header fields were historically ignored or bypassed in fast-path and default JWS validation routines, allowing malformed or unsupported critical extensions to go unvalidated.
Auth Bypass: Several fundamental validation checks for standard claims ('exp', 'iss', 'sub', 'aud', 'iat', 'jti') were either missing entirely or skipped if claims were omitted or set to zero-values, enabling token verification bypasses.
Cryptographic Failure: Passing incorrect pointer addresses (e.g., of big.Int pointers) to the underlying crypto/ecdsa.Verify function resulted in a complete signature verification bypass.