GO
Product
go-jose
6
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch
Add go-jose to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-116586 New | 6.9 | Oct 26 | Go JOSE: Panics in JSON parsing Affected: < 4.1.5 |
| CVE-2026-116585 New | 6.9 | Oct 26 | Go JOSE: Panic during CBC-HMAC processing Affected: < 4.1.5 |
| CVE-2025-27144 | 6.6 | Feb 24 | Go JOSE's Parsing Vulnerable to Denial of Service Affected: >= 4.0.0, < 4.0.5 |
| CVE-2024-28180 | 4.3 | Mar 9 | Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) Affected: < 4.0.1; < 3.0.3; < 2.6.3 |
Showing 4