GHSA-2c7c-3mj9-8fqhMedium▾ SunlitDecryption of malicious PBES2 JWE objects can consume unbounded system resources
▾ Sunlit zone — Low / medium · no exploitation signal
impact 27.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
The go-jose package is subject to a "billion hashes attack" causing denial-of-service when decrypting JWE inputs. This occurs when an attacker can provide a PBES2 encrypted JWE blob with a very large p2c value that, when decrypted, produces a denial-of-service.
github.com/go-jose/go-jose/v3 < 3.0.1github.com/square/go-jose < 2.6.2Upgrade to a patched release:
github.com/go-jose/go-jose/v3 3.0.1github.com/square/go-jose 2.6.2