Asgeir Storesund Nilsen 708adf63d4 fix: CVE-2025-30204 - golang-jwt DoS vulnerability via excessive memory allocation (#3687) ...

* fix: CVE-2025-30204 - golang-jwt DoS vulnerability via excessive memory
allocation

Signed-off-by: Asgeir Nilsen <asgeir@twingine.no>

* fix: linting

Signed-off-by: Asgeir Nilsen <asgeir@twingine.no>

* chore: update project-zot/mockoidc to remove golang-jwt v3

Signed-off-by: Asgeir Nilsen <asgeir@twingine.no>

* test: Add more tests for bearer tokens

Signed-off-by: Asgeir Nilsen <asgeir@twingine.no>

* fix: Rewrite tests to remove MakeAuthTestServerLegacy

Signed-off-by: Asgeir Nilsen <asgeir@twingine.no>

---------

Signed-off-by: Asgeir Nilsen <asgeir@twingine.no>

2026-01-14 11:34:58 +02:00

..

constants

fix: Add HTTP client timeouts to prevent indefinite hangs in sync operations (#3574)

2025-11-22 07:57:24 +02:00

content_test.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

content.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

destination.go

fix: remove misleading error messages on successful syncs (#3619)

2025-12-09 08:11:28 +02:00

ecr_credential_helper.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

oci_layout.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

on_demand_disabled.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

on_demand.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

referrers.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

remote.go

fix: more logging for sync extension (#3656)

2025-12-16 00:03:24 +02:00

repo_tags_cache.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

service.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

sync_disabled_test.go

refactor(test): new apis for creating temporary files (#3605)

2025-12-05 09:54:38 +02:00

sync_internal_test.go

fix: remove misleading error messages on successful syncs (#3619)

2025-12-09 08:11:28 +02:00

sync_test.go

fix: CVE-2025-30204 - golang-jwt DoS vulnerability via excessive memory allocation (#3687)

2026-01-14 11:34:58 +02:00

sync.go

fix: more logging for sync extension (#3656)

2025-12-16 00:03:24 +02:00

utils.go

refactor: optimize code with modern Go patterns and pre-allocation (#3576)

2025-11-24 09:42:45 +02:00