{"action":"Upgrade github.com/square/go-jose to 0.0.0-20160903044734-789a4c4bd4c1 or later.","affected":[{"introduced":"0"}],"component":"github.com/square/go-jose","cve_ids":["CVE-2016-9123"],"ecosystem":"Go","epss":0.02149,"exploited":false,"fixed_versions":["0.0.0-20160903044734-789a4c4bd4c1"],"ghsa_id":"GHSA-3fx4-7f69-5mmg","id":"tcs_01M5KETSV98BNESRYPZJNX4EY7","modified_at":"2026-07-06T15:15:12.421720019Z","published_at":"2021-06-23T17:14:12Z","references":["https://osv.dev/vulnerability/GHSA-3fx4-7f69-5mmg","https://nvd.nist.gov/vuln/detail/CVE-2016-9123","https://github.com/square/go-jose/commit/789a4c4bd4c118f7564954f441b29c153ccd6a96","https://hackerone.com/reports/165170","https://pkg.go.dev/vuln/GO-2020-0009","https://www.openwall.com/lists/oss-security/2016/11/03/1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-3fx4-7f69-5mmg","url":"https://osv.dev/vulnerability/GHSA-3fx4-7f69-5mmg"}],"summary":"Integer Overflow in go-jose"}