GO
Product
go-jose
4
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch
Add go-jose to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-116587 New | 7.5 | Oct 26 | Go JOSE: DoS when parsing JWKs that contain RSA keys Affected: < 4.1.6 |
| CVE-2026-34986 | 7.5 | Apr 6 | Go JOSE affect by a panic in JWE decryption Affected: >= 4.0.0, < 4.1.4; < 3.0.5 |
| CVE-2026-116586 New | 6.9 | Oct 26 | Go JOSE: Panics in JSON parsing Affected: < 4.1.5 |
| CVE-2026-116585 New | 6.9 | Oct 26 | Go JOSE: Panic during CBC-HMAC processing Affected: < 4.1.5 |
Showing 4