CVE-2026-116587— Go JOSE: DoS when parsing JWKs that contain RSA keys
Quick assessment
Affected
go-jose go-jose
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Go JOSE 是一个用 Go 语言实现的 JavaScript 对象签名与加密（JOSE）标准库，支持 JSON Web Encryption（JWE）、JSON Web Signature（JWS）和 JSON Web Token（JWT）标准。在 4.1.6 版本之前，go-jose 在解析来自 JWK（JSON Web Key）的攻击者可控的 RSA 模数和素数值时，未在执行 crypto/rsa.PrivateKey.Validate 验证之前强制检查其大小和一致性约束。在 Go 1.24 及更高版本中，
Possible ATT&CK Techniques 2 AI
T1190 · Exploit Public-Facing Application T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-116587
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Go JOSE: DoS when parsing JWKs that contain RSA keys
Source: CVE Program / CVE List V5
Vulnerability Description
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.6, go-jose parses attacker-controlled RSA modulus and prime values from JWKs without enforcing size and consistency bounds before passing them to crypto/rsa.PrivateKey.Validate. On Go 1.24 and later, crafted large or degenerate RSA parameters can make that validation consume cubic CPU time, allowing remote denial of service in applications that parse JWKs from untrusted sources. This issue is fixed in version 4.1.6.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
算法复杂性
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-116587
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-116587
请登录查看更多情报信息。
Other References for CVE-2026-116587 (3)
-
Release v4.1.6 · go-jose/go-jose · GitHub x_refsource_MISC
-
Merge commit from fork · go-jose/go-jose@a0111f8 · GitHub x_refsource_MISC
Same Patch Batch · go-jose · 2026-10-26 · 3 CVEs total
| CVE-2026-116586 | 6.9 MEDIUM | Go JOSE: Panics in JSON parsing |
| CVE-2026-116585 | 6.9 MEDIUM | Go JOSE: Panic during CBC-HMAC processing |
IV. Related Vulnerabilities
Same product: go-jose
-
CVE-2026-116586
Go JOSE: Panics in JSON parsing -
CVE-2026-116585
Go JOSE: Panic during CBC-HMAC processing -
CVE-2026-34986
Go JOSE affect by a panic in JWE decryption -
CVE-2025-27144
Go JOSE's Parsing Vulnerable to Denial of Service -
CVE-2024-28180
Go JOSE vulnerable to Improper Handling of Highly Compressed
Same vendor: go-jose
-
CVE-2026-116586
Go JOSE: Panics in JSON parsing -
CVE-2026-116585
Go JOSE: Panic during CBC-HMAC processing -
CVE-2026-34986
Go JOSE affect by a panic in JWE decryption -
CVE-2025-27144
Go JOSE's Parsing Vulnerable to Denial of Service -
CVE-2024-28180
Go JOSE vulnerable to Improper Handling of Highly Compressed
Same weakness: CWE-407
-
CVE-2026-116577
Tornado: Quadratic CPU usage when parsing HTTP headers with -
CVE-2026-65631
erlang-jose RSA JWK parsing attempts to factor an attacker-c -
CVE-2026-108529
SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic -
CVE-2026-113436
Quadratic bignum parsing of Content-Length and Host port val -
CVE-2026-16762
Denial-of-service vulnerability in the Qt Core QXmlStream pa