Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Go Jose
HIGH 7.5
CVE-2026-34986
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption …
Fix: 3.0.5 / 4.1.4+
Fix from $1,950
2026-04-06
Go Jose
CRITICAL 9.1
CVE-2016-9121
go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted messag…
Fix: after 1.0.3
Fix from $2,300
2017-03-28
Go Jose
HIGH 7.5
CVE-2016-9122
go-jose before 1.0.4 suffers from multiple signatures exploitation. The go-jose library supports messages with multiple signatures. However, when val…
Fix: after 1.0.3
Fix from $1,950
2017-03-28
Go Jose
HIGH 7.5
CVE-2016-9123
go-jose before 1.0.5 suffers from a CBC-HMAC integer overflow on 32-bit architectures. An integer overflow could lead to authentication bypass for CB…
Fix: after 1.0.4
Fix from $1,950
2017-03-28