mirror of
https://github.com/docker/cli.git
synced 2026-11-14 00:33:51 -04:00
Sebastiaan van Stijn
81e4a109a3
Fixed Security Issues - Thumbprint: reject invalid RSA key [GHSA-r39w-98wm-9pp6] - json: backport stdlib fix for embedded unexported field [GHSA-27pc-rm86-68pq] - Detect if headers are set by presence in the map [GHSA-p9j4-2j95-j4rv] - limit RSA size in certificate verify [GHSA-v6h2-qj3f-2h6v] - Limit recipients and signatures in JWE/JWS [GHSA-c67m-wr4h-2ccg] Fixed - jwk: fix bug in x5c parsing - reject base64-encoded "null" in protected headers Deprecated - deprecate ParseEncrypted / ParseSigned full diff: https://github.com/go-jose/go-jose/compare/v4.1.6...v4.1.7 [GHSA-r39w-98wm-9pp6]: https://github.com/go-jose/go-jose/security/advisories/GHSA-r39w-98wm-9pp6 [GHSA-27pc-rm86-68pq]: https://github.com/go-jose/go-jose/security/advisories/GHSA-27pc-rm86-68pq [GHSA-p9j4-2j95-j4rv]: https://github.com/go-jose/go-jose/security/advisories/GHSA-p9j4-2j95-j4rv [GHSA-v6h2-qj3f-2h6v]: https://github.com/go-jose/go-jose/security/advisories/GHSA-v6h2-qj3f-2h6v [GHSA-c67m-wr4h-2ccg]: https://github.com/go-jose/go-jose/security/advisories/GHSA-c67m-wr4h-2ccg Signed-off-by: Sebastiaan van Stijn <github@gone.nl>