CLEANSTART-2026-NA22425: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
Security vulnerability affects the bank-vaults package. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/bank-vaultsto a version that resolves this vulnerability.Fixed in 1.30.0-r0
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The severity vector indicates network-based exploitation with low attack complexity. It does not require privileges or user interaction.
What is the expected security impact?
The reported impact is limited to availability, rated High. The provided vector indicates no confidentiality or integrity impact.
Does the advisory identify affected or fixed bank-vaults versions?
No affected version range, fixed version, or mitigation is included in the provided advisory data.