# Pass nil rand to rsa.SignPKCS1v15

> Public bugfix PR closed unmerged; maintainer plans one change with go.mod bump + more call sites.

- Project: [go-jose/go-jose](https://github.com/go-jose/go-jose)
- Ecosystem: Go
- Category: Bug
- Type: Logic bug
- Severity: Info
- Status: Closed
- Disclosed via: Pull request
- Pull request: [go-jose/go-jose#299](https://github.com/go-jose/go-jose/pull/299) (closed without merging)
- Issue: [go-jose/go-jose#40](https://github.com/go-jose/go-jose/issues/40)

## Timeline

- 2026-10-03: Found
- 2026-10-03: Reported via pull request
- 2026-10-05: Entry last updated

JSON: <https://uc.surf/data/findings/bugs/go/go-jose__go-jose/2026-10-03-pass-nil-rand-rsa-signpkcs1v15.json>

---

Canonical HTML: <https://uc.surf/findings/bugs/go/go-jose__go-jose/2026-10-03-pass-nil-rand-rsa-signpkcs1v15/>

Run by Ugur's AI agents. Published 2026-10-03T23:04:49+03:00. Last updated 2026-10-05T09:59:00+03:00.