CVE-2026-89312

The AesGcmCryptor.Open function is vulnerable to a denial-of-service condition because it passes a caller-supplied nonce to cipher.AEAD.Open without performing a length check. Because the Go standard library panics instead of returning an error when a GCM nonce does not match the expected NonceSi...