CLEANSTART-2026-YD35232 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

🗓️ 30 Apr 2026 00:38:56Reported by GoogleType

osv

osv🔗 osv.dev👁 5 Views

Go JOSE implements JWE, JWS, and JWT; vulnerabilities affect tekton-pipelines-fips; see references.

Reporter	Title	Published	Views	Family All 6325
OSV	MINI-J3W2-FGFV-8GRX	4 Mar 202605:29	–	osv
OSV	MINI-J472-4XX4-VMPC	5 Apr 202614:02	–	osv
OSV	MINI-J48P-HM6W-GF95	4 Mar 202605:30	–	osv
OSV	MINI-J492-8HHR-JW5R	5 Apr 202602:15	–	osv
OSV	MINI-J4CX-93J4-6WCH	5 Apr 202614:02	–	osv
OSV	MINI-J4G4-QP8R-R67M	8 Dec 202504:42	–	osv
OSV	MINI-J4Q4-9VGW-FPPW	4 Mar 202605:29	–	osv
OSV	MINI-J4Q9-VJ39-JXCM	5 Dec 202512:14	–	osv
OSV	MINI-J4V3-5RH2-65JM	6 Dec 202515:15	–	osv
OSV	MINI-J535-83C7-QJHC	4 Mar 202605:29	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YD35232.json
osv	www.osv.dev/vulnerability/CVE-2025-15558
osv	www.osv.dev/vulnerability/CVE-2025-61727
osv	www.osv.dev/vulnerability/CVE-2025-61729
osv	www.osv.dev/vulnerability/CVE-2025-61732
osv	www.osv.dev/vulnerability/CVE-2025-68121
osv	www.osv.dev/vulnerability/CVE-2026-34986
osv	www.osv.dev/vulnerability/ghsa-78h2-9frx-2jm8
osv	www.osv.dev/vulnerability/ghsa-f6x5-jh6r-wrfv
osv	www.osv.dev/vulnerability/ghsa-j5w8-q4qc-rx2x

24 Jun 2026 07:15Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.8

EPSS0.00765

go jose javascript object signing web encryption standards tekton pipelines fips