CVE-2026-89320

The record

`HmacShaCryptor.Hash` never hashed its input. For any input it returned `HMAC_K("")` — the MAC of the empty message under the key. Every AES-CBC-HMAC JWE produced or verified by gose therefore carried an authentication tag that is constant per key and independent of the message, removing ciphertext integrity entirely.

Affected packages

Related vulnerabilities

• CVE-2026-119186 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-354
• CVE-2026-118782 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-354
• CVE-2026-118776 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-354
• CVE-2026-90720 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024… CWE-354
• CVE-2026-116608 A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. CWE-354
• CVE-2026-65625 The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified… CWE-354
• CVE-2026-115906 zip is a zip library for Rust that supports reading and writing simple ZIP files. CWE-354
• CVE-2026-35501 When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both… CWE-354