GO-2022-0945 Signature validation bypass in gopkg.in/square/go-jose.v1

The go-jose library suffers from multiple signatures exploitation. When validating a signed message, the API did not indicate which signature was valid, which creates the potential for confusion...