https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 11:42:27 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-04897 cnvd-2017-04897 https://cve.radiocsirt.org/vuln/cnvd-2017-04897 https://cve.radiocsirt.org/vuln/euvd-2026-87598 EUVD-2026-87598 https://cve.radiocsirt.org/vuln/euvd-2026-87598 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9121 <p>go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static private key of the receiver, thus making it vulnerable to an invalid curve attack.</p> <p>go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static private key of the receiver, thus making it vulnerable to an invalid curve attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-9121 https://cve.radiocsirt.org/vuln/ghsa-86r9-39j9-99wp <p><strong>Affected:</strong> Go: gopkg.in/square/go-jose.v1, Go: github.com/square/go-jose</p> <p>go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static private key of the receiver, thus making it vulnerable to an invalid curve attack.</p> <p><strong>Affected:</strong> Go: gopkg.in/square/go-jose.v1, Go: github.com/square/go-jose</p> <p>go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static private key of the receiver, thus making it vulnerable to an invalid curve attack.</p> https://cve.radiocsirt.org/vuln/ghsa-86r9-39j9-99wp https://cve.radiocsirt.org/vuln/gsd-2016-9121 gsd-2016-9121 https://cve.radiocsirt.org/vuln/gsd-2016-9121