MEDIUM5.3Go
GHSA-6294-6rgp-fr7r· CVE-2023-50658, GHSA-mhpq-9638-x6pwjose2go vulnerable to denial of service via large p2c value
Modified: 9/10/2026
package
Go/github.com/dvsekhvalnov/jose2go
pkg:go/github.com/dvsekhvalnov/jose2go
HIGH7.5Go
GHSA-9mj6-hxhv-w67j· CVE-2025-63811, GO-2025-4123jose2go is vulnerable to a JWT bomb attack through its decode function
Modified: 9/10/2026
—Go
GO-2023-2409· CVE-2023-50658, GHSA-6294-6rgp-fr7rDenial of service when decrypting attacker controlled input in github.com/dvsekhvalnov/jose2go
Modified: 2/4/2026
—Go
GO-2025-4123· CVE-2025-63811, GHSA-9mj6-hxhv-w67jDenial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token high compression ratio in github.com/dvsekhvalnov/jose2go
Modified: 2/4/2026