github.com/dvsekhvalnov/jose2go
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| jose2go is vulnerable to a JWT bomb attack through its decode function | github.com/dvsekhvalnov/jose2goMulticluster Engine for Kubernetes/multicluster-engine/cluster-api-provider-aws-rhel9 | GoRed Hat | High | Fix reported | |
| jose2go vulnerable to denial of service via large p2c value | github.com/dvsekhvalnov/jose2go | Go | Medium | Fix reported |