`github.com/go-jose/go-jose/v4`

Ecosystem:
go

Package URL:
pkg:golang/github.com/go-jose/go-jose/v4

Total PRs:
769 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
348 repositories

Unique Repos (30 days):
15 repositories

Security Advisories

DoS in go-jose Parsing

GHSA-c6gw-w398-hv78 CVE-2025-27144 MODERATE published 9 months ago • updated 3 days ago

### Impact When parsing compact JWS or JWE input, go-jose could use excessive memory. The code used strings.Split(token, ".") to split JWT tokens, ...

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

GHSA-c5q2-7r4c-mv6g CVE-2024-28180 MODERATE published over 1 year ago • updated 3 days ago

### Impact An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or Decryp...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump github.com/go-jose/go-jose/v4 from 4.1.0 to 4.1.1 in the gomod group

cloudfoundry/korifi #4055

4.1.0 → 4.1.1 Patch PR

Closed 5 months ago 1 comment

Bump github.com/go-jose/go-jose/v4 from 4.1.0 to 4.1.1 in the all group

cert-manager/csi-driver-spiffe #306

4.1.0 → 4.1.1 Patch PR

Closed 5 months ago 3 comments

chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.0 to 4.1.1

Qovery/qovery-cli #485

4.1.0 → 4.1.1 Patch PR

Closed 5 months ago 1 comment

Bump github.com/go-jose/go-jose/v4 from 4.1.0 to 4.1.1 in the all group

octo-sts/app #941

4.1.0 → 4.1.1 Patch PR

Open 5 months ago

build(deps): bump the go_modules group across 2 directories with 4 updates

paulpham157/daytona #6

4.0.4 → 4.0.5 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5

oceanbase/dify-plugin-daemon #1

4.0.4 → 4.0.5 Patch PR

Closed 5 months ago 1 comment

Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5

nekoimi/oss-auto-cert #27

4.0.2 → 4.0.5 Patch PR

Merged 5 months ago

build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5

ctrlbbj/XrayR #4

4.0.1 → 4.0.5 Patch PR

Open 5 months ago

build(deps): bump the go_modules group across 2 directories with 5 updates

paulpham157/daytona #5

4.0.4 → 4.0.5 Patch PR

Closed 5 months ago 2 comments

Bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5

wata727/packer-plugin-amazon-ami-management #445

4.0.1 → 4.0.5 Patch PR

Open 5 months ago

chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in /connectgateway

JulyMoon87/golang-samples #6

4.0.4 → 4.0.5 Patch PR

Open 5 months ago

build(deps): bump the go_modules group with 5 updates

ashirt-ops/ashirt-server #1267

4.0.2 → 4.0.5 Patch PR

Closed 5 months ago 3 comments

chore(deps): bump the go_modules group across 1 directory with 5 updates

guruh46/rudder-server #4

4.0.4 → 4.0.5 Patch PR

Open 5 months ago

chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5

rilldata/rill #7475

4.0.4 → 4.0.5 Patch PR

Open 5 months ago

Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go_modules group

ricoberger/parca-operator #66

4.0.4 → 4.0.5 Patch PR

Open 5 months ago

Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go_modules group across 1 directory

pulumi/pulumi-terraform-module #415

4.0.4 → 4.0.5 Patch PR

Open 5 months ago

Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5

hashicorp/terraform-provider-google #23262

4.0.4 → 4.0.5 Patch PR

Closed 5 months ago 3 comments

Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go_modules group

ricoberger/parca-operator #63

4.0.4 → 4.0.5 Patch PR

Open 6 months ago

Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5

integr8ly/cloud-resource-operator #854

4.0.4 → 4.0.5 Patch PR

Open 6 months ago

[Dependabot](deps): Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5

turbot/steampipe-postgres-fdw #561

4.0.4 → 4.0.5 Patch PR

Open 6 months ago 1 comment

build(deps): bump the go_modules group across 4 directories with 16 updates

offsoc/kops #3

4.0.3 → 4.0.5 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the go_modules group across 1 directory with 6 updates

offsoc/SamWaf #3

4.0.4 → 4.0.5 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the go_modules group across 2 directories with 5 updates

paulpham157/daytona #3

4.0.4 → 4.0.5 Patch PR

Open 6 months ago

Bump the go_modules group across 11 directories with 12 updates

mike22664/teleport #18

4.0.2 → 4.0.5 Patch PR

Open 6 months ago

Bump the go_modules group across 1 directory with 9 updates

offsoc/spire #3

4.0.2 → 4.0.5 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump the go_modules group across 1 directory with 7 updates

H1d3r/goreleaser #319

4.0.4 → 4.0.5 Patch PR

Open 6 months ago

Bump the go_modules group across 1 directory with 4 updates

SherfeyInv/devbox #117

4.0.4 → 4.0.5 Patch PR

Open 6 months ago 2 comments

Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5

hashicorp/terraform-provider-vault #2493

4.0.4 → 4.0.5 Patch PR

Closed 6 months ago 3 comments

Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5

RiseDefenseSystems/cli #1

4.0.2 → 4.0.5 Patch PR

Open 6 months ago

Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5

milgradesec/filter #144

4.0.4 → 4.0.5 Patch PR

Merged 6 months ago

Bump the go_modules group across 1 directory with 5 updates

offsoc/cloudflared #4

4.0.1 → 4.0.4 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go_modules group

jq129398/guardian2 #3

4.0.4 → 4.0.5 Patch PR

Open 6 months ago 1 comment

Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5

GoogleCloudPlatform/terraform-google-conversion #4023

4.0.4 → 4.0.5 Patch PR

Open 6 months ago 1 comment

chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in /firebase-auth in the go_modules group across 1 directory

gofiber/recipes #3179

4.0.4 → 4.0.5 Patch PR

Closed 6 months ago 2 comments

build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5

dpe27/es-krake #29

4.0.1 → 4.0.5 Patch PR

Open 6 months ago

Bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5

earth-sol/headscale #7

4.0.1 → 4.0.5 Patch PR

Open 6 months ago

chore(deps): bump the go_modules group across 83 directories with 2 updates

gofiber/recipes #3149

4.0.4 → 4.0.5 Patch PR

Open 6 months ago

Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 in the go_modules group across 1 directory

equinor/radix-cost-allocation-api #142

4.0.2 → 4.0.5 Patch PR

Open 6 months ago

chore(deps): bump the go_modules group across 1 directory with 4 updates

descope/pulumi-descope #188

4.0.4 → 4.0.5 Patch PR

Open 6 months ago

build(deps): bump the go_modules group across 1 directory with 5 updates

Aqr-K/XrayR #7

4.0.4 → 4.0.5 Patch PR

Merged 6 months ago

build(deps): bump the go_modules group with 7 updates

Aqr-K/XrayR #5

4.0.1 → 4.0.5 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in /collector/odigosotelcol

odigos-io/odigos #2970

4.0.4 → 4.0.5 Patch PR

Open 6 months ago 4 comments

Bump the go_modules group across 1 directory with 4 updates

Graysonbarton/cli-2 #14

4.0.2 → 4.0.5 Patch PR

Open 6 months ago

Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go_modules group across 1 directory

Shuffle/shuffle-shared #188

4.0.4 → 4.0.5 Patch PR

Merged 6 months ago

build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5

nais/contests #120

4.0.4 → 4.0.5 Patch PR

Merged 6 months ago

Bump the go_modules group across 1 directory with 2 updates

chainguard-dev/vulnerability-scanner-support #50

4.0.4 → 4.0.5 Patch PR

Merged 6 months ago

Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 in the go_modules group across 1 directory

equinor/radix-vulnerability-scanner-api #44

4.0.2 → 4.0.5 Patch PR

Merged 6 months ago

chore(deps): Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5

cosmos/gaia #3774

4.0.4 → 4.0.5 Patch PR

Closed 6 months ago

chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in /cli in the go_modules group across 1 directory

GoogleCloudPlatform/cloud-foundation-toolkit #3035

4.0.4 → 4.0.5 Patch PR

Open 6 months ago 1 comment

Bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5 in the go_modules group across 1 directory

equinor/radix-oauth-guard #18

4.0.1 → 4.0.5 Patch PR

Open 6 months ago 1 comment

Package Details

Name:	`github.com/go-jose/go-jose/v4`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/go-jose/go-jose/v4`
JSON API:	View JSON

Security Advisories

2

Active advisories

MODERATE 2

View All golang Advisories

Package Information

Description:

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. It implements encryption and signing based on the JSON Web Encryption and JSON Web Signature standards, with optional JSON Web Token support available in a sub-package. The library supports both the compact and JWS/JWE JSON Serialization formats, and has optional support for multiple recipients.

Repository:	https://github.com/go-jose/go-jose
Homepage:	https://github.com/go-jose/go-jose
Latest Release:	`v4.1.0` 8 months ago
Dependent Repos:	0
Dependent Packages:	270
Ranking:	Top 10.8009% by dependent repos Top 9.5756% by dependent pkgs

PR Status

Open 346 (45.1%)

Merged 142 (18.5%)

Closed 216 (28.1%)

PR Types

Minor 118 (15.4%)

Patch 586 (76.3%)