{"url":"http://public2.vulnerablecode.io/api/packages/43981?format=json","purl":"pkg:deb/debian/golang-github-go-jose-go-jose@4.0.5-1?distro=trixie","type":"deb","namespace":"debian","name":"golang-github-go-jose-go-jose","version":"4.0.5-1","qualifiers":{"distro":"trixie"},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"4.1.4-1","latest_non_vulnerable_version":"4.1.4-1","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/28407?format=json","vulnerability_id":"VCID-4dm3-anev-b3dc","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34986.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34986.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-34986","reference_id":"","reference_type":"","scores":[{"value":"0.00035","scoring_system":"epss","scoring_elements":"0.10733","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00035","scoring_system":"epss","scoring_elements":"0.10791","published_at":"2026-06-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-34986"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34986","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34986"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/go-jose/go-jose","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/go-jose/go-jose"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34986","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34986"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1136026","reference_id":"1136026","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1136026"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1136027","reference_id":"1136027","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1136027"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1136028","reference_id":"1136028","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1136028"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2455470","reference_id":"2455470","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2455470"},{"reference_url":"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8","reference_id":"GHSA-78h2-9frx-2jm8","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-07T14:21:42Z/"}],"url":"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10125","reference_id":"RHSA-2026:10125","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10125"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10130","reference_id":"RHSA-2026:10130","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10130"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10135","reference_id":"RHSA-2026:10135","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10135"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10175","reference_id":"RHSA-2026:10175","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10175"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11070","reference_id":"RHSA-2026:11070","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11070"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11217","reference_id":"RHSA-2026:11217","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11217"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11512","reference_id":"RHSA-2026:11512","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11512"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11688","reference_id":"RHSA-2026:11688","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11688"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11856","reference_id":"RHSA-2026:11856","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11856"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11916","reference_id":"RHSA-2026:11916","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11916"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11996","reference_id":"RHSA-2026:11996","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11996"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12116","reference_id":"RHSA-2026:12116","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12116"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12277","reference_id":"RHSA-2026:12277","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12277"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12279","reference_id":"RHSA-2026:12279","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12279"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13791","reference_id":"RHSA-2026:13791","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13791"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13829","reference_id":"RHSA-2026:13829","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13829"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16696","reference_id":"RHSA-2026:16696","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16696"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17040","reference_id":"RHSA-2026:17040","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17040"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17121","reference_id":"RHSA-2026:17121","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17121"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17123","reference_id":"RHSA-2026:17123","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17123"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17287","reference_id":"RHSA-2026:17287","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17287"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17448","reference_id":"RHSA-2026:17448","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17448"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17458","reference_id":"RHSA-2026:17458","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17458"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17459","reference_id":"RHSA-2026:17459","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17459"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17468","reference_id":"RHSA-2026:17468","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17468"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17474","reference_id":"RHSA-2026:17474","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17474"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17547","reference_id":"RHSA-2026:17547","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17547"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17550","reference_id":"RHSA-2026:17550","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17550"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17598","reference_id":"RHSA-2026:17598","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17598"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17789","reference_id":"RHSA-2026:17789","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17789"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:18584","reference_id":"RHSA-2026:18584","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:18584"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:18585","reference_id":"RHSA-2026:18585","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:18585"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19017","reference_id":"RHSA-2026:19017","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19017"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19099","reference_id":"RHSA-2026:19099","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19099"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19108","reference_id":"RHSA-2026:19108","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19108"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19135","reference_id":"RHSA-2026:19135","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19135"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19173","reference_id":"RHSA-2026:19173","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19173"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19186","reference_id":"RHSA-2026:19186","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19186"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19353","reference_id":"RHSA-2026:19353","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19353"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19375","reference_id":"RHSA-2026:19375","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19375"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19712","reference_id":"RHSA-2026:19712","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19712"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19719","reference_id":"RHSA-2026:19719","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19719"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19720","reference_id":"RHSA-2026:19720","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19720"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19721","reference_id":"RHSA-2026:19721","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19721"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20034","reference_id":"RHSA-2026:20034","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20034"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20041","reference_id":"RHSA-2026:20041","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20041"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20569","reference_id":"RHSA-2026:20569","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20569"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20607","reference_id":"RHSA-2026:20607","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20607"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20609","reference_id":"RHSA-2026:20609","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20609"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:20946","reference_id":"RHSA-2026:20946","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:20946"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21017","reference_id":"RHSA-2026:21017","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21017"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21703","reference_id":"RHSA-2026:21703","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21703"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21709","reference_id":"RHSA-2026:21709","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21709"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21769","reference_id":"RHSA-2026:21769","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21769"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21931","reference_id":"RHSA-2026:21931","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21931"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21932","reference_id":"RHSA-2026:21932","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21932"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22258","reference_id":"RHSA-2026:22258","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22258"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22260","reference_id":"RHSA-2026:22260","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22260"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22347","reference_id":"RHSA-2026:22347","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22347"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22423","reference_id":"RHSA-2026:22423","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22423"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22450","reference_id":"RHSA-2026:22450","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22450"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22465","reference_id":"RHSA-2026:22465","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22465"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22629","reference_id":"RHSA-2026:22629","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22629"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22714","reference_id":"RHSA-2026:22714","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22714"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22840","reference_id":"RHSA-2026:22840","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22840"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:22937","reference_id":"RHSA-2026:22937","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:22937"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:23228","reference_id":"RHSA-2026:23228","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:23228"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:23241","reference_id":"RHSA-2026:23241","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:23241"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:23345","reference_id":"RHSA-2026:23345","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:23345"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:23361","reference_id":"RHSA-2026:23361","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:23361"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24471","reference_id":"RHSA-2026:24471","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24471"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24475","reference_id":"RHSA-2026:24475","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24475"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24477","reference_id":"RHSA-2026:24477","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24477"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24479","reference_id":"RHSA-2026:24479","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24479"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24482","reference_id":"RHSA-2026:24482","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24482"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24484","reference_id":"RHSA-2026:24484","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24484"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24853","reference_id":"RHSA-2026:24853","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24853"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:24977","reference_id":"RHSA-2026:24977","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:24977"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:25127","reference_id":"RHSA-2026:25127","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:25127"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:25248","reference_id":"RHSA-2026:25248","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:25248"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:25250","reference_id":"RHSA-2026:25250","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:25250"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:25252","reference_id":"RHSA-2026:25252","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:25252"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8490","reference_id":"RHSA-2026:8490","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8490"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8491","reference_id":"RHSA-2026:8491","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8491"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8493","reference_id":"RHSA-2026:8493","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8493"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9385","reference_id":"RHSA-2026:9385","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9385"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9388","reference_id":"RHSA-2026:9388","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9388"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9448","reference_id":"RHSA-2026:9448","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9448"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9453","reference_id":"RHSA-2026:9453","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9453"},{"reference_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants","reference_id":"v4#pkg-constants","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-07T14:21:42Z/"}],"url":"https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/43979?format=json","purl":"pkg:deb/debian/golang-github-go-jose-go-jose@4.1.4-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-go-jose-go-jose@4.1.4-1%3Fdistro=trixie"}],"aliases":["CVE-2026-34986","GHSA-78h2-9frx-2jm8"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4dm3-anev-b3dc"}],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/23375?format=json","vulnerability_id":"VCID-aqz8-1dc8-5ubm","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27144.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27144.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-27144","reference_id":"","reference_type":"","scores":[{"value":"0.00152","scoring_system":"epss","scoring_elements":"0.3557","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00152","scoring_system":"epss","scoring_elements":"0.3575","published_at":"2026-06-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-27144"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/go-jose/go-jose","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/go-jose/go-jose"},{"reference_url":"https://github.com/golang/go/issues/71490","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/golang/go/issues/71490"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27144","reference_id":"","reference_type":"","scores":[{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27144"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098908","reference_id":"1098908","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098908"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2347423","reference_id":"2347423","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2347423"},{"reference_url":"https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22","reference_id":"99b346cec4e86d102284642c5dcbe9bb0cacfc22","reference_type":"","scores":[{"value":"6.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:26:42Z/"}],"url":"https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22"},{"reference_url":"https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78","reference_id":"GHSA-c6gw-w398-hv78","reference_type":"","scores":[{"value":"6.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:26:42Z/"}],"url":"https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:11038","reference_id":"RHSA-2024:11038","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:11038"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11396","reference_id":"RHSA-2025:11396","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11396"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19566","reference_id":"RHSA-2025:19566","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:19566"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19594","reference_id":"RHSA-2025:19594","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:19594"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:22014","reference_id":"RHSA-2025:22014","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:22014"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:22684","reference_id":"RHSA-2025:22684","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:22684"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3059","reference_id":"RHSA-2025:3059","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3059"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3061","reference_id":"RHSA-2025:3061","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3061"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3066","reference_id":"RHSA-2025:3066","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3066"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3068","reference_id":"RHSA-2025:3068","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3068"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3131","reference_id":"RHSA-2025:3131","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3131"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3132","reference_id":"RHSA-2025:3132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3132"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3301","reference_id":"RHSA-2025:3301","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3301"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3335","reference_id":"RHSA-2025:3335","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3335"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3438","reference_id":"RHSA-2025:3438","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3438"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3439","reference_id":"RHSA-2025:3439","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3439"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3501","reference_id":"RHSA-2025:3501","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3501"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3593","reference_id":"RHSA-2025:3593","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3593"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3743","reference_id":"RHSA-2025:3743","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3743"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3775","reference_id":"RHSA-2025:3775","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3775"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3820","reference_id":"RHSA-2025:3820","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3820"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:3906","reference_id":"RHSA-2025:3906","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:3906"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:4211","reference_id":"RHSA-2025:4211","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:4211"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:4427","reference_id":"RHSA-2025:4427","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:4427"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:4511","reference_id":"RHSA-2025:4511","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:4511"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:4712","reference_id":"RHSA-2025:4712","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:4712"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:7389","reference_id":"RHSA-2025:7389","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:7389"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:7391","reference_id":"RHSA-2025:7391","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:7391"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:7397","reference_id":"RHSA-2025:7397","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:7397"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:7407","reference_id":"RHSA-2025:7407","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:7407"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:7459","reference_id":"RHSA-2025:7459","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:7459"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:7462","reference_id":"RHSA-2025:7462","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:7462"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:7467","reference_id":"RHSA-2025:7467","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:7467"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:7479","reference_id":"RHSA-2025:7479","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:7479"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:7669","reference_id":"RHSA-2025:7669","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:7669"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:7753","reference_id":"RHSA-2025:7753","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:7753"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:8059","reference_id":"RHSA-2025:8059","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:8059"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:9167","reference_id":"RHSA-2025:9167","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:9167"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:0627","reference_id":"RHSA-2026:0627","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:0627"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:3718","reference_id":"RHSA-2026:3718","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:3718"},{"reference_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.5","reference_id":"v4.0.5","reference_type":"","scores":[{"value":"6.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:26:42Z/"}],"url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.5"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/43981?format=json","purl":"pkg:deb/debian/golang-github-go-jose-go-jose@4.0.5-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4dm3-anev-b3dc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-go-jose-go-jose@4.0.5-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/43979?format=json","purl":"pkg:deb/debian/golang-github-go-jose-go-jose@4.1.4-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-go-jose-go-jose@4.1.4-1%3Fdistro=trixie"}],"aliases":["CVE-2025-27144","GHSA-c6gw-w398-hv78"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-aqz8-1dc8-5ubm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/18958?format=json","vulnerability_id":"VCID-ec3b-whvu-z7b9","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-28180.json","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-28180.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-28180","reference_id":"","reference_type":"","scores":[{"value":"0.04859","scoring_system":"epss","scoring_elements":"0.89815","published_at":"2026-06-12T12:55:00Z"},{"value":"0.04859","scoring_system":"epss","scoring_elements":"0.89781","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-28180"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28180","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28180"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/go-jose/go-jose","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/go-jose/go-jose"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6MMWFBOXJA6ZCXNVPDFJ4XMK5PVG5RG","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6MMWFBOXJA6ZCXNVPDFJ4XMK5PVG5RG"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJ6LAJJ2FTA2JVVOACCV5RZTOIZLXUNJ","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJ6LAJJ2FTA2JVVOACCV5RZTOIZLXUNJ"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JNPMXL36YGS3GQEVI3Q5HKHJ7YAAQXL5","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JNPMXL36YGS3GQEVI3Q5HKHJ7YAAQXL5"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXKGNCRU7OTM5AHC7YIYBNOWI742PRMY","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXKGNCRU7OTM5AHC7YIYBNOWI742PRMY"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MSOMHDKRPU3A2JEMRODT2IREDFBLVPGS","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MSOMHDKRPU3A2JEMRODT2IREDFBLVPGS"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UG5FSEYJ3GP27FZXC5YAAMMEC5XWKJHG","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UG5FSEYJ3GP27FZXC5YAAMMEC5XWKJHG"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJO2U5ACZVACNQXJ5EBRFLFW6DP5BROY","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJO2U5ACZVACNQXJ5EBRFLFW6DP5BROY"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XJDO5VSIAOGT2WP63AXAAWNRSVJCNCRH","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XJDO5VSIAOGT2WP63AXAAWNRSVJCNCRH"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28180","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28180"},{"reference_url":"https://github.com/go-jose/go-jose/commit/0dd4dd541c665fb292d664f77604ba694726f298","reference_id":"0dd4dd541c665fb292d664f77604ba694726f298","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://github.com/go-jose/go-jose/commit/0dd4dd541c665fb292d664f77604ba694726f298"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1065814","reference_id":"1065814","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1065814"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268854","reference_id":"2268854","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268854"},{"reference_url":"https://github.com/go-jose/go-jose/commit/add6a284ea0f844fd6628cba637be5451fe4b28a","reference_id":"add6a284ea0f844fd6628cba637be5451fe4b28a","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://github.com/go-jose/go-jose/commit/add6a284ea0f844fd6628cba637be5451fe4b28a"},{"reference_url":"https://github.com/go-jose/go-jose/commit/f4c051a0653d78199a053892f7619ebf96339502","reference_id":"f4c051a0653d78199a053892f7619ebf96339502","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://github.com/go-jose/go-jose/commit/f4c051a0653d78199a053892f7619ebf96339502"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ/","reference_id":"GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ/"},{"reference_url":"https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g","reference_id":"GHSA-c5q2-7r4c-mv6g","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6MMWFBOXJA6ZCXNVPDFJ4XMK5PVG5RG/","reference_id":"I6MMWFBOXJA6ZCXNVPDFJ4XMK5PVG5RG","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6MMWFBOXJA6ZCXNVPDFJ4XMK5PVG5RG/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJ6LAJJ2FTA2JVVOACCV5RZTOIZLXUNJ/","reference_id":"IJ6LAJJ2FTA2JVVOACCV5RZTOIZLXUNJ","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJ6LAJJ2FTA2JVVOACCV5RZTOIZLXUNJ/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JNPMXL36YGS3GQEVI3Q5HKHJ7YAAQXL5/","reference_id":"JNPMXL36YGS3GQEVI3Q5HKHJ7YAAQXL5","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JNPMXL36YGS3GQEVI3Q5HKHJ7YAAQXL5/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXKGNCRU7OTM5AHC7YIYBNOWI742PRMY/","reference_id":"KXKGNCRU7OTM5AHC7YIYBNOWI742PRMY","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXKGNCRU7OTM5AHC7YIYBNOWI742PRMY/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MSOMHDKRPU3A2JEMRODT2IREDFBLVPGS/","reference_id":"MSOMHDKRPU3A2JEMRODT2IREDFBLVPGS","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MSOMHDKRPU3A2JEMRODT2IREDFBLVPGS/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:0041","reference_id":"RHSA-2024:0041","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:0041"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:1456","reference_id":"RHSA-2024:1456","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:1456"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:1563","reference_id":"RHSA-2024:1563","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:1563"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:1567","reference_id":"RHSA-2024:1567","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:1567"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:1570","reference_id":"RHSA-2024:1570","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:1570"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:1574","reference_id":"RHSA-2024:1574","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:1574"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:1812","reference_id":"RHSA-2024:1812","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:1812"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:1859","reference_id":"RHSA-2024:1859","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:1859"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:1946","reference_id":"RHSA-2024:1946","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:1946"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2049","reference_id":"RHSA-2024:2049","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2049"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2054","reference_id":"RHSA-2024:2054","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2054"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2071","reference_id":"RHSA-2024:2071","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2071"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2096","reference_id":"RHSA-2024:2096","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2096"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2549","reference_id":"RHSA-2024:2549","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2549"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2639","reference_id":"RHSA-2024:2639","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2639"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2669","reference_id":"RHSA-2024:2669","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2669"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2672","reference_id":"RHSA-2024:2672","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2672"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2773","reference_id":"RHSA-2024:2773","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2773"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2776","reference_id":"RHSA-2024:2776","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2776"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2784","reference_id":"RHSA-2024:2784","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2784"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2865","reference_id":"RHSA-2024:2865","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2865"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2869","reference_id":"RHSA-2024:2869","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2869"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2875","reference_id":"RHSA-2024:2875","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2875"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:2877","reference_id":"RHSA-2024:2877","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:2877"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:3254","reference_id":"RHSA-2024:3254","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:3254"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:3327","reference_id":"RHSA-2024:3327","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:3327"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:3349","reference_id":"RHSA-2024:3349","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:3349"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:3351","reference_id":"RHSA-2024:3351","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:3351"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:3523","reference_id":"RHSA-2024:3523","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:3523"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:3718","reference_id":"RHSA-2024:3718","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:3718"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:3826","reference_id":"RHSA-2024:3826","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:3826"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:3827","reference_id":"RHSA-2024:3827","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:3827"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:3968","reference_id":"RHSA-2024:3968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:3968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4006","reference_id":"RHSA-2024:4006","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4006"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4010","reference_id":"RHSA-2024:4010","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4010"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4028","reference_id":"RHSA-2024:4028","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4028"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4041","reference_id":"RHSA-2024:4041","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4041"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4455","reference_id":"RHSA-2024:4455","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4455"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4484","reference_id":"RHSA-2024:4484","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4484"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4591","reference_id":"RHSA-2024:4591","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4591"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:6209","reference_id":"RHSA-2024:6209","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:6209"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:6687","reference_id":"RHSA-2024:6687","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:6687"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:7164","reference_id":"RHSA-2024:7164","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:7164"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:7179","reference_id":"RHSA-2024:7179","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:7179"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:8229","reference_id":"RHSA-2024:8229","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:8229"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:8235","reference_id":"RHSA-2024:8235","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:8235"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:8260","reference_id":"RHSA-2024:8260","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:8260"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:8425","reference_id":"RHSA-2024:8425","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:8425"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:8974","reference_id":"RHSA-2024:8974","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:8974"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:0536","reference_id":"RHSA-2025:0536","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:0536"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UG5FSEYJ3GP27FZXC5YAAMMEC5XWKJHG/","reference_id":"UG5FSEYJ3GP27FZXC5YAAMMEC5XWKJHG","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UG5FSEYJ3GP27FZXC5YAAMMEC5XWKJHG/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJO2U5ACZVACNQXJ5EBRFLFW6DP5BROY/","reference_id":"UJO2U5ACZVACNQXJ5EBRFLFW6DP5BROY","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJO2U5ACZVACNQXJ5EBRFLFW6DP5BROY/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XJDO5VSIAOGT2WP63AXAAWNRSVJCNCRH/","reference_id":"XJDO5VSIAOGT2WP63AXAAWNRSVJCNCRH","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-11T15:08:38Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XJDO5VSIAOGT2WP63AXAAWNRSVJCNCRH/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/43980?format=json","purl":"pkg:deb/debian/golang-github-go-jose-go-jose@4.0.1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-go-jose-go-jose@4.0.1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/43981?format=json","purl":"pkg:deb/debian/golang-github-go-jose-go-jose@4.0.5-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4dm3-anev-b3dc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-go-jose-go-jose@4.0.5-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/43979?format=json","purl":"pkg:deb/debian/golang-github-go-jose-go-jose@4.1.4-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-go-jose-go-jose@4.1.4-1%3Fdistro=trixie"}],"aliases":["CVE-2024-28180","GHSA-c5q2-7r4c-mv6g"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ec3b-whvu-z7b9"}],"risk_score":"4.0","resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-go-jose-go-jose@4.0.5-1%3Fdistro=trixie"}