~ / search / GHSA-f6vf-pq8c-69m4

GHSA-f6vf-pq8c-69m4

Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-17195

Packages

EcosystemPackageAffectedFixed in
Maven com.nimbusds:nimbus-jose-jwt < 7.9 7.9

Details

As written in the advisory (Markdown source, shown as plain text).

Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.

References

External links from the advisory. They lead to third-party sites.