Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
github.com/go-jose/go-jose/v3
Go
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Go JOSE: Panic during CBC-HMAC processing
CVE-2026-116585 · GHSA-4W3G-JFJ2-CW2Q
github.com/go-jose/go-jose/v3
github.com/go-jose/go-jose/v4
Go
Red Hat
Medium
Fix reported
2026-10-29
Go JOSE: Panics in JSON parsing
CVE-2026-116586 · GHSA-VVM8-GF78-28G4
github.com/go-jose/go-jose/v3
github.com/go-jose/go-jose/v4
Go
Red Hat
Medium
Fix reported
2026-10-29
Go JOSE: DoS when parsing JWKs that contain RSA keys
CVE-2026-116587 · GHSA-MGCC-CWW5-FP2Q
github.com/go-jose/go-jose/v3
github.com/go-jose/go-jose/v4
Go
Red Hat
High
Fix reported
2026-10-27
Go JOSE Panics in JWE decryption
CVE-2026-34986 · GHSA-78H2-9FRX-2JM8
Version ranges need review.
github.com/go-jose/go-jose/v3
github.com/go-jose/go-jose/v4
Go
Red Hat
High
Fix reported
2026-09-10
DoS in go-jose Parsing
CVE-2025-27144 · GHSA-C6GW-W398-HV78
Version ranges need review.
github.com/go-jose/go-jose/v3
github.com/go-jose/go-jose/v4
Go
Red Hat
Medium
Fix reported
2026-09-10
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6G
Version ranges need review.
github.com/go-jose/go-jose/v3
github.com/go-jose/go-jose/v4
Go
Red Hat
Medium
Fix reported
2026-09-10
Decryption of malicious PBES2 JWE objects can consume unbounded system resources
GHSA-2C7C-3MJ9-8FQH · GO-2023-2334
Version ranges need review.
github.com/go-jose/go-jose/v3
github.com/square/go-jose
Go
Medium
Fix reported
2026-09-10
