Eclipse KeyPont - GOSE input validation error vulnerability

Eclipse KeyPont – Versions 0.9.0 through 0.13.0-rc1 and versions prior to 1.0.0-rc1 contain an input validation error vulnerability. This vulnerability arises because the JweDirectDecryptorBlock.Decrypt function reads a 64-bit plaintext length from protected header fields of thalesaad without...