All vulnerabilities
CVE-2026-89320GHSA-h6w5-722x-2h3m

Eclipse KeyPont - GOSE: HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrity

Eclipse Foundation Eclipse KeyPont - GOSE
Open in ThreatlineRecord JSON
CVSS
8.8High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.0.0-rc1Fixed versionCVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

HmacShaCryptor.Hash never hashed its input. For any input it returned HMAC_K("") — the MAC of the empty message under the key. Every AES-CBC-HMAC JWE produced or verified by gose therefore carried an authentication tag that is constant per key and independent of the message, removing ciphertext integrity entirely.

Text from CVE List

Affected versions 4

  • Eclipse KeyPont - GOSEaffected: 0.9.0 through 0.13.0-rc1CVE List
  • Eclipse KeyPont - GOSEaffected: all versions before 1.0.0-rc1CVE List
  • github.com/ThalesGroup/gose, go>= 0.9.0, <= 0.13.0-rc1GitHub
  • github.com/eclipse-keypont/gose, go< 1.0.0-rc1GitHub

References 1