CVE-2016-9122 — go-jose before 1.0.4 suffers from multiple signatures exploitation. The go-jose library supports messages with multiple signatures. However, when validating a signed message the API did not indicate w — CVE Database · The Intelligence Room