—
GO-2021-0109
Improper handling of token revocation in github.com/ory/fosite
Quick fix
GO-2021-0109 — github.com/ory/fosite: upgrade to the fixed version with the command below.
go get github.com/ory/fosite@v0.34.0Details
Due to improper error handling, an error with the underlying token storage may cause a user to believe a token has been successfully revoked when it is in fact still valid. An attackers ability to exploit this relies on an ability to trigger errors in the underlying storage.
Are you affected?
Enter the version of the package you're using.