CVE-2026-116585

Name of the Vulnerable Software and Affected Versions Go JOSE versions prior to 4.1.5

Description Decrypting untrusted JWE ciphertext using A128CBC-HS256, A192CBC-HS384, or A256CBC-HS512 algorithms can result in an empty ciphertext buffer being passed to the CBC-HMAC unpadding process. Due to insufficient validation, this empty buffer can be indexed, leading to a panic and a subsequent denial of service. This affects applications that decrypt attacker-controlled ciphertext using these specific content-encryption algorithms.

Recommendations Update to version 4.1.5.