[ Vendor · 3 CVEs ]
go-jose
CVEs affecting go-jose published in the last 30 days, plus any go-jose CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-116586 | 26 Oct 2026 | CVSS 6.9 | Go JOSE: Panics in JSON parsingGo JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption… | Fix |
| CVE-2026-116587 | 26 Oct 2026 | CVSS 7.5 | Go JOSE: DoS when parsing JWKs that contain RSA keysGo JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption… | Fix |
| CVE-2026-116585 | 26 Oct 2026 | CVSS 6.9 | Go JOSE: Panic during CBC-HMAC processingGo JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption… | Fix |