Skip to content

gopkg.in/square/go-jose.v2 (Go)

Advisories
2
Latest version
—
License
—
OpenSSF Scorecard
—

Known vulnerabilities

AdvisorySeverityAffectedFixed in
GHSA-c5q2-7r4c-mv6g
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
Medium
EPSS 1.96%
<= 2.6.0
No fix yet
GHSA-c5q2-7r4c-mv6g
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
Medium
EPSS 1.96%
all versions
No fix yet
Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor