Verify if go-jose component is affected by CVE-3472

[craigtracey]

Please verify if the go-jose Golang library used in this project is affected by CVE-3472. The dependency is from github.com/go-jose/go-jose at commit 99b346cec4e86d102284642c5dcbe9bb0cacfc22.