CVE-2026-89312

AesGcmCryptor.Open passed a caller-supplied nonce straight to cipher.AEAD.Open without checking its length. The Go standard library panics rather than returning an error when a GCM nonce is not exactly NonceSize bytes, so a JWE carrying a wrong-sized IV crashes the decrypting goroutine...

CVE-2026-89312

The AesGcmCryptor.Open function is vulnerable to a denial-of-service condition because it passes a caller-supplied nonce to cipher.AEAD.Open without performing a length check. Because the Go standard library panics instead of returning an error when a GCM nonce does not match the expected NonceSi...

CVE-2026-89312

"AesGcmCryptor.Open" passed a caller-supplied nonce straight to "cipher.AEAD.Open" without checking its length. The Go standard library panics rather than returning an error when a GCM nonce is not exactly "NonceSize" bytes, so a JWE carrying a wrong-sized IV crashes the decrypting goroutine...

EUVD-2026-108632

AesGcmCryptor.Open passed a caller-supplied nonce straight to cipher.AEAD.Open without checking its length. The Go standard library panics rather than returning an error when a GCM nonce is not exactly NonceSize bytes, so a JWE carrying a wrong-sized IV crashes the decrypting goroutine...

CVE-2026-89312 AesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IV

AesGcmCryptor.Open passed a caller-supplied nonce straight to cipher.AEAD.Open without checking its length. The Go standard library panics rather than returning an error when a GCM nonce is not exactly NonceSize bytes, so a JWE carrying a wrong-sized IV crashes the decrypting goroutine...

PT-2026-121810

AesGcmCryptor.Open passed a caller-supplied nonce straight to cipher.AEAD.Open without checking its length. The Go standard library panics rather than returning an error when a GCM nonce is not exactly NonceSize bytes, so a JWE carrying a wrong-sized IV crashes the decrypting goroutine...