{
  "title": "Pass nil rand to rsa.SignPKCS1v15",
  "category": "bugs",
  "type": "logic-bug",
  "severity": "info",
  "cvss": null,
  "ecosystem": "go",
  "project": {
    "owner": "go-jose",
    "repo": "go-jose",
    "url": "https://github.com/go-jose/go-jose"
  },
  "affected_versions": null,
  "status": "closed",
  "disclosure": {
    "channel": "pr",
    "ghsa_id": null,
    "cve_id": null,
    "url": "https://github.com/go-jose/go-jose/pull/299",
    "reported_at": "2026-10-03T23:04:49+03:00",
    "published_at": null
  },
  "pr": {
    "url": "https://github.com/go-jose/go-jose/pull/299",
    "state": "closed",
    "merged_at": null,
    "number": 299,
    "issue": 40
  },
  "summary": "Public bugfix PR closed unmerged; maintainer plans one change with go.mod bump + more call sites.",
  "discovered_at": "2026-10-03T00:00:00+03:00",
  "public": true,
  "credit": "ucsurf",
  "updated_at": "2026-10-05T09:59:00+03:00",
  "id": "bugs/go/go-jose__go-jose/2026-10-03-pass-nil-rand-rsa-signpkcs1v15"
}