Approved changes feed: RSS · Atom
cpe:2.3:a:dvsekhvalnov:jose2go:*:*:*:*:*:go:*:*part: a version: * update: *
| Vendor | Dvsekhvalnov (6a405d1e-c625-5730-aba3-3236901bdb51) |
|---|---|
| Product | Jose2Go (042a0368-f6ee-5b07-85c8-0cdc52ffb11f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | go |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/dvsekhvalnov/jose2go |
purl2cpe | 2026-06-01 10:11:32.730466 |
pkg:golang/github.com/dvsekhvalnov/jose2go |
purl2cpe | 2026-06-01 10:11:32.730468 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-63811 |
vulnerable | 2026-06-08 07:39:17.813157 |
Details available
An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.
Published: 2025-11-12T00:00:00.000Z
Updated: 2025-11-13T16:01:59.200Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50658 |
vulnerable | 2026-06-08 06:16:16.284119 |
Details available
The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
Published: 2023-12-25T00:00:00.000Z
Updated: 2024-08-02T22:16:47.116Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.