Skip to content
OpenAdvisories

Package · Azure Linux

dcos-cli

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-116586

    Go JOSE: Panics in JSON parsing

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.5, parsing attacker-controll…

    go-jose go-jose zarf k3d-proxy Debian Ubuntu Azure Linux Wolfi Go
  • Medium 6.9
    CVE-2026-116585

    Go JOSE: Panic during CBC-HMAC processing

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.5, decrypting untrusted JWE …

    go-jose go-jose zarf k3d-proxy Debian Ubuntu Azure Linux Wolfi Go
  • Medium 6.6
    CVE-2025-27144

    Go JOSE's Parsing Vulnerable to Denial of Service

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. In versions on the 4.x branch prior to ve…

    go-jose go-jose zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • Medium 4.3
    CVE-2024-28180

    Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

    Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Th…

    go-jose go-jose zot kubescape Debian Azure Linux Alpine Wolfi Go