CVE-2026-89318

The JweRsaKeyEncryptionDecryptorImpl.Decrypt function is vulnerable to a panic when processing a JWE with an attacker-chosen initialization vector (IV) length. The root cause is that the function passes the IV to cipher.AEAD.Open without performing a length check. Because the Go standard library ...