gopkg.in/go-jose/go-jose.v2
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. It implements encryption and signing based on the JSON Web Encryption and JSON Web Signature standards, with optional JSON Web Token support available in a sub-package. The library supports both the compact and full serialization formats, and has optional support for multiple recipients.
Moderate Security Advisories for gopkg.in/go-jose/go-jose.v2 in go Clear Filters
Moderate
over 1 year ago
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
go
gopkg.in/go-jose/go-jose.v2, github.com/go-jose/go-jose/v3, github.com/go-jose/go-jose/v4