Is github.com/dvsekhvalnov/jose2go safe to use?

github.com/dvsekhvalnov/jose2go has 1 known vulnerabilities on the latest version (v1.8.0). DepScope rates its health at 41/100 (high risk).

What is the latest version of github.com/dvsekhvalnov/jose2go?

The latest version of github.com/dvsekhvalnov/jose2go is v1.8.0, released 2024-11-12.

Yes. github.com/dvsekhvalnov/jose2go has 1 known vulnerabilities. See depscope.dev/pkg/go/github.com/dvsekhvalnov/jose2go for details.

No, github.com/dvsekhvalnov/jose2go is actively maintained. Latest release: v1.8.0 (2024-11-12).

DepScope has no curated alternatives for github.com/dvsekhvalnov/jose2go at this time.

github.com/dvsekhvalnov/jose2go is licensed under MIT.

govv1.8.0

Golang (GO) implementation of Javascript Object Signing and Encryption specification

License MITpermissive4 versions10 maintainers0 deps189 weekly dl

41

/ 100

Health

use with caution

github.com/dvsekhvalnov/[email protected] low health (41/100) — consider alternatives

Update to >= 1.5.1-0.20231206184617-48ba0b76bc88 to fix known vulnerabilities

Health breakdown0 – 100

5/25

maintenance

3/20

popularity

25/25

security

3/15

maturity

5/15

community

Vulnerabilities

1

1 low

Advisories (1)

Severity	ID	Summary	Fixed in
unknown	CVE-2023-50658	Denial of service when decrypting attacker controlled input in github.com/dvsekhvalnov/jose2go	1.5.1-0.20231206184617-48ba0b76bc88

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/dvsekhvalnov/jose2go

Last updated · 2024-11-12T18:12:16Z