`github.com/go-jose/go-jose/v4`

Ecosystem:
go

Package URL:
pkg:golang/github.com/go-jose/go-jose/v4

Total PRs:
769 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
348 repositories

Unique Repos (30 days):
15 repositories

Security Advisories

DoS in go-jose Parsing

GHSA-c6gw-w398-hv78 CVE-2025-27144 MODERATE published 9 months ago • updated 28 minutes ago

### Impact When parsing compact JWS or JWE input, go-jose could use excessive memory. The code used strings.Split(token, ".") to split JWT tokens, ...

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

GHSA-c5q2-7r4c-mv6g CVE-2024-28180 MODERATE published over 1 year ago • updated 26 minutes ago

### Impact An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or Decryp...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the go-modules group across 1 directory with 12 updates

paketo-buildpacks/go-mod-vendor #948

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Bump the go-modules group across 1 directory with 15 updates

paketo-buildpacks/cpython #1039

4.1.2 → 4.1.3 Patch PR

Closed about 2 months ago 1 comment

Bump the go-modules group across 1 directory with 9 updates

paketo-buildpacks/pipenv-install #536

4.1.2 → 4.1.3 Patch PR

Closed about 2 months ago 1 comment

Bump the go-modules group across 1 directory with 15 updates

paketo-buildpacks/pip #773

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Bump the go-modules group across 1 directory with 5 updates

paketo-buildpacks/yarn-install #1049

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago 1 comment

Bump the go-modules group across 1 directory with 11 updates

paketo-buildpacks/pipenv #722

4.1.2 → 4.1.3 Patch PR

Closed about 2 months ago 1 comment

Bump the go-modules group across 1 directory with 11 updates

paketo-buildpacks/nginx #1018

4.1.2 → 4.1.3 Patch PR

Closed about 2 months ago 1 comment

Bump the go-modules group across 1 directory with 6 updates

paketo-buildpacks/go-build #909

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Bump the go-modules group across 1 directory with 12 updates

paketo-buildpacks/go-dist #1132

4.1.2 → 4.1.3 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the go-mod group across 1 directory with 11 updates

DIMO-Network/telemetry-api #217

4.1.1 → 4.1.3 Patch PR

Open about 2 months ago

Bump the go-modules group across 1 directory with 6 updates

paketo-buildpacks/poetry-install #487

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago 1 comment

build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

Zibbp/ganymede #903

4.1.2 → 4.1.3 Patch PR

Merged about 2 months ago

Bump the go-modules group across 1 directory with 38 updates

paketo-buildpacks/npm-install #1026

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago 1 comment

Bump the go-modules group across 1 directory with 11 updates

paketo-buildpacks/httpd #934

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago 1 comment

Bump the go-modules group across 1 directory with 6 updates

paketo-buildpacks/go-mod-vendor #947

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago 1 comment

build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3 in /go

denisvmedia/inventario #646

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.3

ericahin/RedHat-perses-perses #26

4.1.1 → 4.1.3 Patch PR

Open about 2 months ago 1 comment

build(deps): Bump the gomod group across 3 directories with 4 updates

sigstore/sigstore #2171

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

Altinity/altinity-mcp #32

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

golanglib/dependabot_botherer #6174

4.1.2 → 4.1.3 Patch PR

Closed about 2 months ago 1 comment

Bump the go-modules group across 1 directory with 13 updates

paketo-buildpacks/node-engine #1321

4.1.2 → 4.1.3 Patch PR

Closed about 2 months ago 1 comment

Bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

spiffe/spire #6359

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.3

chainguard-dev/go-oidctest #60

4.1.1 → 4.1.3 Patch PR

Open about 2 months ago

Bump the gomod group across 1 directory with 7 updates

thomasbscj/Korifi-Mod #5

4.1.2 → 4.1.3 Patch PR

Closed about 2 months ago 1 comment

Bump the third-party group across 1 directory with 19 updates

openziti/ziti #3313

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Bump the go-modules group across 1 directory with 8 updates

paketo-buildpacks/pip-install #521

4.1.2 → 4.1.3 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the go-modules group across 1 directory with 78 updates

cyrillesondag/paketo-buildpacks-pnpm #40

4.1.1 → 4.1.3 Patch PR

Open about 2 months ago

Bump the go-modules group across 1 directory with 14 updates

paketo-buildpacks/cpython #1038

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Bump the go-modules group across 1 directory with 7 updates

paketo-buildpacks/pipenv-install #535

4.1.2 → 4.1.3 Patch PR

Closed about 2 months ago 1 comment

Bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

perses/perses #3429

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3 in the go-patch group

raidiam-oss/recco-mock-tpp #2

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago 2 comments

Bump the go-modules group across 1 directory with 14 updates

paketo-buildpacks/pip #772

4.1.2 → 4.1.3 Patch PR

Closed about 2 months ago 1 comment

Bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

gardener/gardener-discovery-server #150

4.1.2 → 4.1.3 Patch PR

Merged about 2 months ago 6 comments

Bump the go-modules group with 3 updates

paketo-buildpacks/yarn-install #1048

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

tknie/services #66

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago 1 comment

build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

canonical/lxd #16676

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

canonical/lxd #16669

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Bump the go-modules group with 3 updates

paketo-buildpacks/yarn #892

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago 1 comment

Bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.3

couchbase/sync_gateway #7797

4.1.1 → 4.1.3 Patch PR

Open about 2 months ago

chore(deps): bump the gomod-version-updates group across 1 directory with 9 updates

zitadel/zitadel-go #520

4.1.2 → 4.1.3 Patch PR

Closed about 2 months ago 1 comment

deps(go): bump the minor-updates group with 2 updates

ubuntu/authd-oidc-brokers #698

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

spiffe/go-spiffe #361

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

build(deps): Bump the gomod group across 5 directories with 6 updates

bobcallaway/sigstore #1239

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Bump the go-modules group across 1 directory with 10 updates

paketo-buildpacks/pipenv #721

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago 1 comment

Bump the go-modules group across 1 directory with 10 updates

paketo-buildpacks/nginx #1017

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago 1 comment

Bump the go-modules group with 4 updates

paketo-buildpacks/go-build #908

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

chore(deps): bump the dependencies group in /bi with 3 updates

batteries-included/batteries-included #2737

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

stackrox/stackrox #17138

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

andydunstall/piko #285

4.1.2 → 4.1.3 Patch PR

Merged about 2 months ago

chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

DataDog/go-secure-sdk #244

4.1.2 → 4.1.3 Patch PR

Open about 2 months ago

Package Details

Name:	`github.com/go-jose/go-jose/v4`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/go-jose/go-jose/v4`
JSON API:	View JSON

Security Advisories

2

Active advisories

MODERATE 2

View All golang Advisories

Package Information

Description:

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. It implements encryption and signing based on the JSON Web Encryption and JSON Web Signature standards, with optional JSON Web Token support available in a sub-package. The library supports both the compact and JWS/JWE JSON Serialization formats, and has optional support for multiple recipients.

Repository:	https://github.com/go-jose/go-jose
Homepage:	https://github.com/go-jose/go-jose
Latest Release:	`v4.1.0` 8 months ago
Dependent Repos:	0
Dependent Packages:	270
Ranking:	Top 10.8009% by dependent repos Top 9.5756% by dependent pkgs

PR Status

Open 346 (45.0%)

Merged 142 (18.5%)

Closed 217 (28.2%)

PR Types

Minor 118 (15.3%)

Patch 587 (76.3%)