Vulnerability GO-2025-3488
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
February 26, 2025 at 02:51 AM UTC
Unexpected memory consumption during token parsing in golang.org/x/oauth2
v0.1.0 - v0.26.0
v0.1.0 - v0.26.0
Summary
Unexpected memory consumption during token parsing in golang.org/x/oauth2
Details
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Impacted packages
Timeline
Published
1 year ago
February 26, 2025 at 02:51 AM UTC
Fixed (v0.27.0)
1 year ago
February 24, 2025 at 05:56 PM UTC
Last Modified
6 hours ago
November 14, 2026 at 01:12 PM UTC