PT-2026-30011 · Go Jose+2 · Go-Jose+2
CVE-2026-34986
·
Published
2026-04-03
·
Updated
2026-07-31
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Go JOSE versions prior to 4.1.4 and versions prior to 3.0.5
Description
Go JOSE, an implementation of the Javascript Object Signing and Encryption standards in Go, is susceptible to a denial of service. When decrypting a JSON Web Encryption (JWE) object, a panic occurs if the
alg field indicates a key wrapping algorithm (ending in KW, excluding A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted key field is empty. This panic arises from cipher.KeyUnwrap() in key wrap.go attempting to allocate a slice with an invalid length. The issue is triggered through ParseEncrypted(), ParseEncryptedJSON(), or ParseEncryptedCompact() followed by Decrypt(). The vulnerability can also be reached by directly calling cipher.KeyUnwrap() with a ciphertext parameter less than 16 bytes long.Recommendations
Update to Go JOSE version 4.1.4 or 3.0.5 to resolve this issue.
Exploit
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Go-Jose
Red Os
Rocky Linux