---
id: GHSA-2c7c-3mj9-8fqh
aliases:
  - GO-2023-2334
title: >-
  Decryption of malicious PBES2 JWE objects can consume unbounded system
  resources
summary: >-
  Decryption of malicious PBES2 JWE objects can consume unbounded system
  resources
severity: medium
vendor: go-jose
product: github.com/go-jose/go-jose/v3
ecosystem: go
affected:
  - github.com/go-jose/go-jose/v3 < 3.0.1
  - github.com/square/go-jose < 2.6.2
patched:
  - github.com/go-jose/go-jose/v3 3.0.1
  - github.com/square/go-jose 2.6.2
published: '2023-11-21'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T03:49:58.719941857Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-2c7c-3mj9-8fqh'
references:
  - url: 'https://github.com/go-jose/go-jose/issues/64'
  - url: >-
      https://github.com/go-jose/go-jose/commit/65351c27657d58960c2e6c9fbb2b00f818e50568
  - url: >-
      https://github.com/go-jose/go-jose/commit/a3d307244c3bc50b25a71aa0688764c32ec419c7
  - url: 'https://github.com/go-jose/go-jose'
tags:
  - osv
  - go
ingestedAt: '2026-09-12T03:13:01.745Z'
---

## Overview

The go-jose package is subject to a "billion hashes attack" causing denial-of-service when decrypting JWE inputs. This occurs when an attacker can provide a PBES2 encrypted JWE blob with a very large p2c value that, when decrypted, produces a denial-of-service.

## Affected packages

- `github.com/go-jose/go-jose/v3 < 3.0.1`
- `github.com/square/go-jose < 2.6.2`

## Remediation

Upgrade to a patched release:

- `github.com/go-jose/go-jose/v3 3.0.1`
- `github.com/square/go-jose 2.6.2`