{"id":"CVE-2026-89319","published":"2026-10-23T09:17:08.493","lastModified":"2026-10-23T19:30:07.567","description":"`JweDirectDecryptorBlock.Decrypt` read a 64-bit plaintext length from the `_thales_aad` protected-header field and used it without any validation. A truncated field panics `binary.BigEndian.Uint64`, an oversized value drives an unbounded allocation, and a value larger than the decrypted block panics with a slice-bounds error.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-129"],"vendors":[],"products":[],"references":[{"url":"https://github.com/eclipse-keypont/gose/security/advisories/GHSA-4gj8-hg2r-gw6q","tags":[]}],"exploitRefs":[{"url":"https://github.com/eclipse-keypont/gose/security/advisories/GHSA-4gj8-hg2r-gw6q","tags":[]}],"hasPoc":true,"ai":null}