CVE Tools
Sign in

CVE-2024-28180

Published: Mar 9, 2024Updated: Dec 3, 2025 Sources: CVE List NVD GHSA BDUCWE-409
4.3MEDIUM
NVD MITRE
EPSS Score
2.0%
Top 21.6%
CISA KEV
Not in KEV
Exploits
No Known Exploits
Remediation
Patch Available
Self-Check
OpenVAS

Description

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

No summary for this CVE yet.

CVSS Vector Breakdown

AV:NAC:LPR:LUI:NS:UC:NI:NA:L
Exploitability
AV:NAttack Vector
Network
AC:LAttack Complexity
Low
PR:LPrivileges Required
Low
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:NConfidentiality
None
I:NIntegrity
None
A:LAvailability
Low
Open in CVSS calculator →

Weaknesses

CWE-409

Affected Products

Go
package-ecosystem
github.com/go-jose/go-jose/v4
OSS Libraries
github.com/go-jose/go-jose/v3
OSS Libraries
gopkg.in/go-jose/go-jose.v2
OSS Libraries
gopkg.in/square/go-jose.v2
OSS Libraries
ООО «Ред Софт»
commercial·RUaka red soft
РЕД ОСOn-premOS
Operating Systems / linux-distro
Сообщество свободного программного обеспечения
oss-projectaka fsf
go-joseLibraryLibrary
OSS Libraries / generic-library
ООО "Открытая мобильная платформа"
commercial·RU
Аврора ЦентрOn-prem
Operating Systems / mobile-os
go-jose
oss-projectaka jose
go-joseLibrary
OSS Libraries / go
go-jose project
oss-projectaka go-jose
go-joseLibrary
OSS Libraries / generic-library
and 1 more affected products View all →

Exploitability

Official Patch Available
Is your org exposed to CVE-2024-28180?We can run the check for you — a free external exposure review, no install. Check my exposure

References

https://github.com/go-jose/go-jose/commit/0dd4dd541c665fb292d664f77604ba694726f298
github.com
https://github.com/go-jose/go-jose/commit/add6a284ea0f844fd6628cba637be5451fe4b28a
github.com
https://github.com/go-jose/go-jose/commit/f4c051a0653d78199a053892f7619ebf96339502
github.com
and 26 more references View all →

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2024-28180 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows