What’s Vulnerable › Products
go-jose vulnerabilities
9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your go-jose version is affected
Latest go-jose vulnerabilities
- CVE-2026-116587 — Go JOSE: DoS when parsing JWKs that contain RSA keys (CVSS 7.5)
- CVE-2026-116586 — Go JOSE: Panics in JSON parsing (CVSS 6.9)
- CVE-2026-116585 — Go JOSE: Panic during CBC-HMAC processing (CVSS 6.9)
- CVE-2026-34986 — Go JOSE affect by a panic in JWE decryption (CVSS 7.5)
- CVE-2025-27144 — Go JOSE's Parsing Vulnerable to Denial of Service (CVSS 6.6)
- CVE-2024-28180 — Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) (CVSS 4.3)
- CVE-2016-9123 — (CVSS 7.5)
- CVE-2016-9122 — (CVSS 7.5)
- CVE-2016-9121 — (CVSS 9.1)