Live › vulnerability › CVE-2026-116585
Go to dashboardGo JOSE is a Go library for JSON Web Encryption, Signature and Token standards. Decrypting untrusted JWE ciphertext with A128CBC-HS256, A192CBC-HS384 or A256CBC-HS512 can pass an empty buffer into unpadding, causing a panic that crashes the process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 22:25 UTC. All times on this page are UTC.
Applications that decrypt attacker-controlled JWE ciphertext using one of the three CBC-HMAC content-encryption algorithms (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) are affected. Applications that only decrypt trusted ciphertext, or that do not use these algorithms, are not described as affected by the sources.
No product ranges from the sources yet.
go list -m all | grep jose and check whether the Go JOSE version is below 4.1.5.4.1.5 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.5, decrypting untrusted JWE ciphertext with A128CBC-HS256, A192CBC-HS384, or A256CBC-HS512 can pass an empty ciphertext buffer to CBC-HMAC unpadding. Insufficient validation allows the empty buffer to be indexed, causing a panic and denial of service. Applications that decrypt attacker-controlled ciphertext with one of these content-encryption algorithms are affected. This issue is fixed in version 4.1.5.
This page as .md · .json · in your agent: get_signal("CVE-2026-116585")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.