CVE-2026-89312

"AesGcmCryptor.Open" passed a caller-supplied nonce straight to "cipher.AEAD.Open" without checking its length. The Go standard library panics rather than returning an error when a GCM nonce is not exactly "NonceSize" bytes, so a JWE carrying a wrong-sized IV crashes the decrypting goroutine...

CVE-2026-89312

The AesGcmCryptor.Open function is vulnerable to a denial-of-service condition because it passes a caller-supplied nonce to cipher.AEAD.Open without performing a length check. Because the Go standard library panics instead of returning an error when a GCM nonce does not match the expected NonceSi...