Description
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
golang.org/x/oauth2 golang.org/x/oauth2/jws
Default version status: unaffected
0 to < 0.27.0affected