~ / search / GHSA-6v2p-p543-phr9

GHSA-6v2p-p543-phr9

golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2025-22868

Packages

EcosystemPackageAffectedFixed in
Go golang.org/x/oauth2 < 0.27.0 0.27.0

Details

As written in the advisory (Markdown source, shown as plain text).

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

References

External links from the advisory. They lead to third-party sites.