Is github.com/dvsekhvalnov/jose2go safe to use?

github.com/dvsekhvalnov/jose2go has 1 known vulnerabilities on the latest version (v1.8.0). DepScope rates its health at 41/100 (high risk).

What is the latest version of github.com/dvsekhvalnov/jose2go?

The latest version of github.com/dvsekhvalnov/jose2go is v1.8.0, released 2024-11-12.

Does github.com/dvsekhvalnov/jose2go have known vulnerabilities?

Yes. github.com/dvsekhvalnov/jose2go has 1 known vulnerabilities. See depscope.dev/pkg/go/github.com/dvsekhvalnov/jose2go for details.

Is github.com/dvsekhvalnov/jose2go deprecated?

No, github.com/dvsekhvalnov/jose2go is actively maintained. Latest release: v1.8.0 (2024-11-12).

What are alternatives to github.com/dvsekhvalnov/jose2go?

DepScope has no curated alternatives for github.com/dvsekhvalnov/jose2go at this time.

What license does github.com/dvsekhvalnov/jose2go use?

github.com/dvsekhvalnov/jose2go is licensed under MIT.

github.com/dvsekhvalnov/jose2go

govv1.8.0

Golang (GO) implementation of Javascript Object Signing and Encryption specification

License MITpermissive4 versions10 maintainers0 deps189 weekly dl

dvsekhvalnov/jose2go

/ 100

Health

use with caution

github.com/dvsekhvalnov/[email protected] low health (41/100) — consider alternatives

Update to >= 1.5.1-0.20231206184617-48ba0b76bc88 to fix known vulnerabilities

Moderate health score (41/100) — verify manually

Health breakdown0 – 100

5/25

maintenance

3/20

popularity

25/25

security

3/15

maturity

5/15

community

Vulnerabilities

1 low

Advisories (1)

Severity	ID	Summary	Fixed in
unknown	CVE-2023-50658	Denial of service when decrypting attacker controlled input in github.com/dvsekhvalnov/jose2go	1.5.1-0.20231206184617-48ba0b76bc88

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/dvsekhvalnov/jose2go

Last updated · 2024-11-12T18:12:16Z