All products

github.com/go-jose/go-jose/v4

Go · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Go JOSE: Panic during CBC-HMAC processingCVE-2026-116585 · GHSA-4W3G-JFJ2-CW2Q github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat Medium Fix reported
Go JOSE: Panics in JSON parsingCVE-2026-116586 · GHSA-VVM8-GF78-28G4 github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat Medium Fix reported
Go JOSE: DoS when parsing JWKs that contain RSA keysCVE-2026-116587 · GHSA-MGCC-CWW5-FP2Q github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat High Fix reported
Go JOSE Panics in JWE decryptionCVE-2026-34986 · GHSA-78H2-9FRX-2JM8Version ranges need review. github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat High Fix reported
DoS in go-jose ParsingCVE-2025-27144 · GHSA-C6GW-W398-HV78Version ranges need review. github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat Medium Fix reported
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6GVersion ranges need review. github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat Medium Fix reported