Executive brief
Elliptic curve key disclosure in github.com/square/go-jose
Affected products
- Go gopkg.in/square/go-jose.v1
- Go github.com/square/go-jose
Junglewise Threat Intelligence
CVE-2016-9121: GO-2020-0010 - Elliptic curve key disclosure in github.com/square/go-jose
CVE-2016-9121 · Severity: low · CVSS 3 · Published 2021-04-14
Technologies: github.com/square/go-jose (Go). Vendors: Go.
Related threats
- GO-2025-3485 - DoS in go-jose Parsing in github.com/go-jose/go-jose
- Decryption of malicious PBES2 JWE objects can consume unbounded system resources
- GO-2023-2334 - Denial of service via decryption of malicious PBES2 JWE objects in github.com/go-jose/go-jose/v3
- GO-2022-0945 - Signature validation bypass in gopkg.in/square/go-jose.v1
- Square go-jose integer overflow in CBC-HMAC decryption