Go/gopkg.in/square/go-jose.v2

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

Modified: 9/10/2026

Decompression bomb vulnerability in github.com/go-jose/go-jose

Modified: 2/4/2026