{"id":"CVE-2026-89318","kind":"vulnerability","aliases":["CVE-2026-89318"],"related":[],"title":"Go JWE library: wrong-sized IV crashes the decrypting process","description":"`JweRsaKeyEncryptionDecryptorImpl.Decrypt` passed the JWE's initialization vector to `cipher.AEAD.Open` without checking its length. The Go standard library **panics** rather than returning an error when a GCM nonce is not exactly `NonceSize()` bytes, so a JWE carrying a wrong-sized IV crashes the decrypting goroutine.","summary":"A JWE token with an initialization vector of the wrong length makes the decryptor pass it to the Go standard library's GCM Open, which panics instead of returning an error. An attacker who can send such a token crashes the goroutine doing the decryption.","severity":"medium","cvss":6.9,"epss":0.00167,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["go","jose","jwe","package"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-23T09:17:08+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-25T03:38:33+00:00","updated_at":"2026-10-25T03:38:33+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-25T03:38:33Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"unknown","title":"Go JWE library: wrong-sized IV crashes the decrypting process","impact":"low","summary":"A JWE token with an initialization vector of the wrong length makes the decryptor pass it to the Go standard library's GCM Open, which panics instead of returning an error. An attacker who can send such a token crashes the goroutine doing the decryption.","category":"package","nicknames":[],"who_cares":["go","jwe","jose"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Decrypting goroutine crashes, denying service to the process","analyst_note":"Sources do not name the affected Go JWE library, its versions or the fixed release; check the NVD entry and the upstream advisory for the package and patched version.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000517,"input_tokens":3410,"output_tokens":351,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-89318':14A,17A 'attack':54B 'byte':98C 'carri':102C 'check':77C 'cipher.aead.open':75C 'crash':8A,61B,108C 'cve':12A,15A 'decrypt':10A,66B,110C 'decryptor':35B 'error':52B,89C 'exact':96C 'gcm':44B,92C 'go':1A,18B,40B,81C 'goroutin':63B,111C 'initi':27B,72C 'instead':48B 'iv':7A,107C 'jose':19B 'jwe':2A,20B,23B,70C,101C 'jwersakeyencryptiondecryptorimpl.decrypt':67C 'length':32B,79C 'librari':3A,42B,83C 'make':33B 'nonc':93C 'nonces':97C 'open':45B 'packag':21B 'panic':47B,84C 'pass':36B,68C 'process':11A 'rather':85C 'return':50B,87C 'send':57B 'size':6A,106C 'standard':41B,82C 'token':24B,60B 'vector':28B,73C 'without':76C 'wrong':5A,31B,105C 'wrong-siz':4A,104C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T09:17:08+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"emo@eclipse.org","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-89318","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89318","severity":null,"published_at":"2026-10-23T09:17:08+00:00","modified_at":"2026-10-23T19:30:07+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-89318","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-89318","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}