GO
Product
go-jose
by go-jose · last CVE Oct 26, 2026
4
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch

Add go-jose to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116587
New
7.5
0%
Oct 26
Go JOSE: DoS when parsing JWKs that contain RSA keys
Affected: < 4.1.6
CVE-2026-34986
7.5
1%
Apr 6
Go JOSE affect by a panic in JWE decryption
Affected: >= 4.0.0, < 4.1.4; < 3.0.5
Showing 2