CLEANSTART-2026-HB11422: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade cleanstart/tempo to a version that resolves this vulnerability.

   Fixed in 2.10.10-r0
2. Upgrade

   Upgrade cleanstart/tempo to a version that resolves this vulnerability.

   Fixed in 3.1.1-r1
3. Upgrade

   Upgrade cleanstart/tempo to a version that resolves this vulnerability.

   Fixed in 3.0.5-r1
4. Upgrade

   Upgrade cleanstart/vault to a version that resolves this vulnerability.

   Fixed in 2.0.4-r9

Event History

Child vulnerabilities

Contains the following vulnerabilities.

• CVE-2026-116587