6.9
Moyenne
CVE-2026-89312 `AesGcmCryptor.Open` passed a caller-supplied nonce straight to `cipher.AEAD.Open` without checking its length
Description
`AesGcmCryptor.Open` passed a caller-supplied nonce straight to `cipher.AEAD.Open` without checking its length. The Go standard library **panics** rather than returning an error when a GCM nonce is not exactly `NonceSize()` bytes, so a JWE carrying a wrong-sized IV crashes the decrypting goroutine.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Eclipse KeyPont - GOSE 1.0 | premières → < 1.0.0-rc4 | 1.0.0-rc4 |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Eclipse KeyPont - GOSE
Les 9 CVE de Eclipse KeyPont - GOSE →
CVE-2026-89320
`HmacShaCryptor.Hash` never hashed its input
8.8
Élevée
CVE-2026-89319
`JweDirectDecryptorBlock.Decrypt` read a 64-bit plaintext length from the `_thales_aad` protected-header field and…
6.3
Moyenne
CVE-2026-89318
`JweRsaKeyEncryptionDecryptorImpl.Decrypt` passed the JWE's initialization vector to `cipher.AEAD.Open` without checking…
6.9
Moyenne
CVE-2026-89317
gose parsed the JWS `crit` header into `JwsHeader.Crit` and then never read it
6.3
Moyenne