8.8
High
CVE-2026-89320 `HmacShaCryptor.Hash` never hashed its input
Description
`HmacShaCryptor.Hash` never hashed its input. For any input it returned `HMAC_K("")` — the MAC of the empty message under the key. Every AES-CBC-HMAC JWE produced or verified by gose therefore carried an authentication tag that is constant per key and independent of the message, removing ciphertext integrity entirely.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Eclipse KeyPont - GOSE 1.0 | earliest → < 1.0.0-rc1 | 1.0.0-rc1 |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Eclipse KeyPont - GOSE
The 9 CVEs of Eclipse KeyPont - GOSE →
CVE-2026-89319
`JweDirectDecryptorBlock.Decrypt` read a 64-bit plaintext length from the `_thales_aad` protected-header field and…
6.3
Medium
CVE-2026-89318
`JweRsaKeyEncryptionDecryptorImpl.Decrypt` passed the JWE's initialization vector to `cipher.AEAD.Open` without checking…
6.9
Medium
CVE-2026-89317
gose parsed the JWS `crit` header into `JwsHeader.Crit` and then never read it
6.3
Medium
CVE-2026-89316
`LoadPublicKey` resolved an EC key's curve with an unchecked type assertion, `algToOptsMap[alg].(*ECDSAOptions)`
6.3
Medium