CVE-2026-116585Medium· 6.9▾ SunlitGo JOSE: Panic during CBC-HMAC processing
▾ Sunlit zone — Low / medium · no exploitation signal
impact 38 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
0.3%
Disclosed via OSV
Decrypting a ciphertext with "A128CBC-HS256", "A192CBC-HS384", or "A256CBC-HS512" can result in a panic on untrusted input.
Note this advisory is the same as https://github.com/go-jose/go-jose/security/advisories/GHSA-6mp9-8xrw-74r4.
Insufficient validation of parameters can lead to attempting to index into an empty buffer. See https://github.com/go-jose/go-jose/pull/292.
If the application does not require the CBC-HMAC modes for content encryption, and is using github.com/go-jose/go-jose/v4, do not include them in the list of ContentEncryption algorithms passed to ParseEncrypted / ParseEncryptedJSON / ParseEncryptedCompact.
Denial of service vulnerability. Any application which decrypts untrusted ciphertexts with the indicated algorithms is affected.
Thanks to Joshua Rogers of AISLE Research for reporting this problem.
github.com/go-jose/go-jose/v4 < 4.1.5github.com/go-jose/go-jose/v3 <= 3.0.5Upgrade to a patched release:
github.com/go-jose/go-jose/v4 4.1.5Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116586Medium· 6.9Go JOSE: Panics in JSON parsing
CVE-2026-116587High· 7.5Go JOSE: DoS when parsing JWKs that contain RSA keys
GHSA-2c7c-3mj9-8fqhMediumDecryption of malicious PBES2 JWE objects can consume unbounded system resources
CVE-2026-77375Medium· 6.5SFTPGo is an open source, event-driven file transfer solution
CVE-2026-107222Medium· 6.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets
CVE-2026-107225Medium· 6.5Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets