MEDIUMGo
GHSA-2c7c-3mj9-8fqh· GO-2023-2334Decryption of malicious PBES2 JWE objects can consume unbounded system resources
Modified: 9/10/2026
package
Go/github.com/square/go-jose
pkg:go/github.com/square/go-jose
HIGH7.5Go
GHSA-3fx4-7f69-5mmg· CVE-2016-9123, GO-2020-0009Integer Overflow in go-jose
Modified: 7/6/2026
CRITICAL9.1Go
GHSA-86r9-39j9-99wp· CVE-2016-9121, GO-2020-0010Elliptic Curve Key Disclosure in go-jose
Modified: 11/8/2023
—Go
GO-2020-0009· CVE-2016-9123, GHSA-3fx4-7f69-5mmgInteger overflow in github.com/square/go-jose
Modified: 5/20/2024
—Go
GO-2020-0010· CVE-2016-9121, GHSA-86r9-39j9-99wpElliptic curve key disclosure in github.com/square/go-jose
Modified: 5/20/2024
—Go
GO-2023-2334· GHSA-2c7c-3mj9-8fqhDenial of service via decryption of malicious PBES2 JWE objects in github.com/go-jose/go-jose/v3
Modified: 2/4/2026
—Go
GO-2025-3485· CVE-2025-27144, GHSA-c6gw-w398-hv78DoS in go-jose Parsing in github.com/go-jose/go-jose
Modified: 2/4/2026