supabase / gotrue / 6967218261
65%

DEFAULT BRANCH: master
Ran
Jobs 1
Files 111
Run time 10s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 65.594%. Remained the same
6967218261

push

github

web-flow 
chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 (#1316)

Bumps
[github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from
3.0.0 to 3.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-jose/go-jose/releases">github.com/go-jose/go-jose/v3's
releases</a>.</em></p>
<blockquote>
<h2>Version 3.0.1</h2>
<h3>Fixed</h3>
<p>Security issue: an attacker specifying a large &quot;p2c&quot; value
can cause JSONWebEncryption.Decrypt and JSONWebEncryption.DecryptMulti
to consume large amounts of CPU, causing a DoS. Thanks to Matt Schwager
(<a href="https://github.com/mschwager"><code>@​mschwager</code></a>)
for the disclosure and to Tom Tervoort for originally publishing the
category of attack. <a
href="https://i.blackhat.com/BH-US-23/Presentations/US-23-Tervoort-Three-New-Attacks-Against-JSON-Web-Tokens.pdf">https://i.blackhat.com/BH-US-23/Presentations/US-23-Tervoort-Three-New-Attacks-Against-JSON-Web-Tokens.pdf</a></p>
<p>The release is tagged off the release-v3.0.1 branch to avoid mixing
in some as-yet unreleased changes on the v3 branch.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/go-jose/go-jose/blob/v3/CHANGELOG.md">github.com/go-jose/go-jose/v3's
changelog</a>.</em></p>
<blockquote>
<h1>v3.0.1</h1>
<p>Fixed:</p>
<ul>
<li>Security issue: an attacker specifying a large &quot;p2c&quot; value
can cause
JSONWebEncryption.Decrypt and JSONWebEncryption.DecryptMulti to consume
large
amounts of CPU, causing a DoS. Thanks to Matt Schwager (<a
href="https://github.com/mschwager"><code>@​mschwager</code></a>) for
the
disclosure and to Tom Tervoort for originally publishing the category of
attack.
<a
href="https://i.blackhat.com/BH-US-23/Presentations/US-23-Tervoort-Three-New-Attacks-Against-JSON-Web-Tokens.pdf">https://i.blackhat.com/BH-US-23/Presentations/US-23-Tervoort-Three-New... (continued)

7603 of 11591 relevant lines covered (65.59%)

54.27 hits per line

Jobs
ID Job ID Ran Files Coverage
1 6967218261.1 0
65.59
 GitHub Action Run
Source Files on build 6967218261
Detailed source file information is not available for this build.