CVE-2026-116585mediumCWE-129

CVE-2026-116585: medium-severity vulnerability in go-jose

Go JOSE: Panic during CBC-HMAC processing

Published · Updated

Follow this CVE+ Monitor go-jose+ Monitor golang-gopkg-square-go-jose.v1

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.3%
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.5, decrypting untrusted JWE ciphertext with A128CBC-HS256, A192CBC-HS384, or A256CBC-HS512 can pass an empty ciphertext buffer to CBC-HMAC unpadding. Insufficient validation allows the empty buffer to be indexed, causing a panic and denial of service. Applications that decrypt attacker-controlled ciphertext with one of these content-encryption algorithms are affected. This issue is fixed in version 4.1.5.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Affected products
go-jose · go-jose
Related CVEs — go-jose

In the same product, most dangerous first.

CVE-2024-28180MEDIUMGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)EPSS 2.0%CVE-2026-34986HIGHGo JOSE affect by a panic in JWE decryptionEPSS 0.7%CVE-2025-27144MEDIUMGo JOSE's Parsing Vulnerable to Denial of ServiceEPSS 0.4%CVE-2026-116587HIGHGo JOSE: DoS when parsing JWKs that contain RSA keysEPSS 0.4%CVE-2026-116586MEDIUMGo JOSE: Panics in JSON parsingEPSS 0.3%