VYPR
← All advisories
High severityNVD Advisory· Published Feb 26, 2025· Updated Feb 26, 2025

Unexpected memory consumption during token parsing in golang.org/x/oauth2

CVE-2025-22868

Description

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
golang.org/x/oauth2Go
< 0.27.00.27.0

Affected products

4559

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.