Skip to contentEclipse Foundation Keypont - Gose vulnerabilities
- eclipse foundation keypont - goseHmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrityCVE-2026-893208.8 High
- eclipse foundation keypont - goseJweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocationCVE-2026-893196.3 Medium
- eclipse foundation keypont - goseJweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check)CVE-2026-893186.9 Medium
- eclipse foundation keypont - goseJwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11)CVE-2026-893176.3 Medium
- eclipse foundation keypont - goseLoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertionCVE-2026-893166.3 Medium
- eclipse foundation keypont - goseJwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffixCVE-2026-893156.9 Medium
- eclipse foundation keypont - goseQuadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 sCVE-2026-893146.9 Medium
- eclipse foundation keypont - goseJwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nilCVE-2026-893136.3 Medium
- eclipse foundation keypont - goseAesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IVCVE-2026-893126.9 Medium