HIGH7.5Go
GHSA-78h2-9frx-2jm8· CVE-2026-34986, GO-2026-4945Go JOSE Panics in JWE decryption
Modified: 9/10/2026
package
Go/github.com/go-jose/go-jose/v4
pkg:go/github.com/go-jose/go-jose/v4
MEDIUM4.3Go
GHSA-c5q2-7r4c-mv6g· CVE-2024-28180, GO-2024-2631Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
Modified: 9/10/2026
MEDIUMGo
GHSA-c6gw-w398-hv78· CVE-2025-27144, GO-2025-3485DoS in go-jose Parsing
Modified: 9/10/2026
—Go
GO-2024-2631· CVE-2024-28180, GHSA-c5q2-7r4c-mv6gDecompression bomb vulnerability in github.com/go-jose/go-jose
Modified: 2/4/2026
—Go
GO-2025-3485· CVE-2025-27144, GHSA-c6gw-w398-hv78DoS in go-jose Parsing in github.com/go-jose/go-jose
Modified: 2/4/2026
—Go
GO-2026-4945· CVE-2026-34986, GHSA-78h2-9frx-2jm8Go JOSE Panics in JWE decryption in github.com/go-jose/go-jose
Modified: 6/1/2026