github.com/dvsekhvalnov/jose2go vulnerabilities (Go)

2 vulnerabilities.

• github.com/dvsekhvalnov/jose2go Go jose2go is vulnerable to a JWT bomb attack through its decode function CVE-2025-63811 Fix available 7.5 HighNovember 12, 2025
• github.com/dvsekhvalnov/jose2go Go jose2go vulnerable to denial of service via large p2c value CVE-2023-50658 Fix available 7.5 HighDecember 20, 2023