Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 1.7% on proxy.golang.org
Top 0.1% dependent packages on proxy.golang.org
Top 0.1% dependent repos on proxy.golang.org
Top 4.3% forks on proxy.golang.org
Top 0.1% docker downloads on proxy.golang.org

proxy.golang.org : github.com/dvsekhvalnov/jose2go

Package jose provides high level functions for producing (signing, encrypting and compressing) or consuming (decoding) Json Web Tokens using Java Object Signing and Encryption spec

Registry - Source - Documentation - JSON
purl: pkg:golang/github.com/dvsekhvalnov/jose2go
Keywords: encryption, federation, jose, json, jwa, jwe, jws, jwt, jwt-auth, jwt-authentication, jwt-token, oauth2, openid, openidconnect, security, signature
License: MIT
Latest release: 6 months ago
First release: over 3 years ago
Namespace: github.com/dvsekhvalnov
Dependent packages: 4,857
Dependent repositories: 3,430
Stars: 176 on GitHub
Forks: 28 on GitHub
Docker dependents: 623
Docker downloads: 2,072,643,073
See more repository details: repos.ecosyste.ms
Last synced: 4 days ago

Moderate

GSA_kwCzR0hTQS02Mjk0LTZyZ3AtZnI3cs4AA5mt

jose2go vulnerable to denial of service via large p2c value
Ecosystems: go
Packages: github.com/dvsekhvalnov/jose2go
Source: github
Published: 3 months ago

Moderate

GSA_kwCzR0hTQS1taHBxLTk2MzgteDZwd84AA38h

Denial of service when decrypting attack controlled input in github.com/dvsekhvalnov/jose2go
Ecosystems: go
Packages: github.com/dvsekhvalnov/jose2go
Source: github
Published: 5 months ago