Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

559 matches found

osv_cleanstart
osv_cleanstart•added 2026/11/05 12:36 a.m.•3 views

CLEANSTART-2026-ZY17213 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

CVE-2026-116585 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerabilit...

6.9CVSS5.9AI score0.00264EPSS
SaveExploits0References3
osv_root
osv_root•added 2026/11/04 4:26 a.m.•16 views

ROOT-APP-GOBINARY-CVE-2026-116587 CVE-2026-116587 in github.com/go-jose/go-jose/v4 - Patched by Root

Root has patched CVE-2026-116587 in the github.com/go-jose/go-jose/v4 package for Root:Go. Multiple fixed versions available...

7.5CVSS6.9AI score0.00366EPSS
SaveExploits0
osv_root
osv_root•added 2026/11/04 4:26 a.m.•36 views

ROOT-APP-GOBINARY-CVE-2026-34986 CVE-2026-34986 in github.com/go-jose/go-jose/v4 - Patched by Root

Root has patched CVE-2026-34986 in the github.com/go-jose/go-jose/v4 package for Root:Go. Multiple fixed versions available...

7.5CVSS6.3AI score0.00663EPSS
SaveExploits0
osv_cleanstart
osv_cleanstart•added 2026/11/03 12:39 a.m.•5 views

CLEANSTART-2026-WP21635 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

CVE-2026-116585 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerabilit...

6.9CVSS5.9AI score0.00264EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/11/03 12:39 a.m.•6 views

CLEANSTART-2026-WE07714 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

CVE-2026-116586 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerabilit...

6.9CVSS5.9AI score0.00292EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/11/03 12:39 a.m.•8 views

CLEANSTART-2026-OI48555 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

CVE-2026-116587 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerabilit...

7.5CVSS7.1AI score0.00366EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/31 1:40 p.m.•5 views

CLEANSTART-2026-ZX60519 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

Security vulnerability affects the opentofu package. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards...

8.7CVSS6.5AI score0.00399EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/31 1:36 p.m.•7 views

CLEANSTART-2026-OM36408 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

CVE-2026-34986 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerability...

7.5CVSS6.5AI score0.00663EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/31 9:12 a.m.•5 views

CLEANSTART-2026-UO49377 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

Security vulnerability affects the kyverno package. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards...

7.5CVSS7.1AI score0.00366EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/31 12:38 a.m.•11 views

CLEANSTART-2026-EX22547 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

CVE-2026-116587 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerabilit...

7.5CVSS7.1AI score0.00366EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/30 6:04 p.m.•10 views

CLEANSTART-2026-XT57020 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

CVE-2026-34986 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerability...

7.5CVSS6.5AI score0.00663EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/30 5:07 p.m.•9 views

CLEANSTART-2026-OC61093 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

CVE-2025-27144 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerability...

8.7CVSS6.5AI score0.00399EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/30 1:26 p.m.•10 views

CLEANSTART-2026-VY25180 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

CVE-2026-34986 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerability...

7.5CVSS6.5AI score0.00663EPSS
SaveExploits0References3
Debian CVE
Debian CVE•added 2026/10/30 12:37 p.m.•10 views

CVE-2026-116587

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. Prior to 4.1.6, go-jose parses attacker-controlled RSA modulus and prime values from...

7.5CVSS6AI score0.00366EPSS
SaveExploits0
Debian CVE
Debian CVE•added 2026/10/30 12:37 p.m.•12 views

CVE-2026-116585

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. Prior to 4.1.5, decrypting untrusted JWE ciphertext with A128CBC-HS256, A192CBC-HS384...

6.9CVSS6.1AI score0.00264EPSS
SaveExploits0
Debian CVE
Debian CVE•added 2026/10/30 12:37 p.m.•12 views

CVE-2026-116586

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. Prior to 4.1.5, parsing attacker-controlled JSON through go-jose allows deeply nested...

6.9CVSS6AI score0.00292EPSS
SaveExploits0
osv_cleanstart
osv_cleanstart•added 2026/10/30 11:14 a.m.•6 views

CLEANSTART-2026-TQ54180 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

CVE-2025-27144 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerability...

8.7CVSS6.5AI score0.00399EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog•added 2026/10/28 9:14 p.m.•15 views

Go JOSE: Panics in JSON parsing

Summary Parsing deeply nested JSON structures can hit Go's stack limit, causing the application to crash. Note: this advisory is the same as https://github.com/go-jose/go-jose/security/advisories/GHSA-6mp9-8xrw-74r4. Impact Denial of service vulnerability. Any application that parses untrusted JS...

6.9CVSS5.9AI score0.00292EPSS
SaveExploits0References6Affected Software2
EUVD
EUVD•added 2026/10/28 9:14 p.m.•12 views

EUVD-2026-110466

Go JOSE: Panics in JSON parsing...

6.9CVSS5.9AI score0.00292EPSS
SaveExploits0References5
osv_ghsa
osv_ghsa•added 2026/10/28 9:14 p.m.•11 views

GHSA-VVM8-GF78-28G4 Go JOSE: Panics in JSON parsing

Summary Parsing deeply nested JSON structures can hit Go's stack limit, causing the application to crash. Note: this advisory is the same as https://github.com/go-jose/go-jose/security/advisories/GHSA-6mp9-8xrw-74r4. Impact Denial of service vulnerability. Any application that parses untrusted JS...

6.9CVSS5.9AI score0.00292EPSS
SaveExploits0References6
Rows per page
Query Builder