Vulnerabilities

TI-2025-39462 CVE-2025-63811 · GHSA-9mj6-hxhv-w67j

An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to…

HIGH 72

An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00277 Published 2025-11-12 Partial fix · 1.7.0 CWE-400

TI-2023-27640 CVE-2023-50658 · GHSA-6294-6rgp-fr7r

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service…

LOW 34

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00824 Published 2023-12-25 Fixed in 1.6.0 CWE-770

Vulnerabilities

Filters

An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to…

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service…