CVE-2026-116587

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.6, go-jose parses attacker-controlled RSA modulus and prime values from JWKs without enforcing size and consistency bounds before passing them to crypto/rsa.PrivateKey.Validate. On Go 1.24 and later, crafted large or degenerate RSA parameters can make that validation consume cubic CPU time, allowing remote denial of service in applications that parse JWKs from untrusted sources. This issue is fixed in version 4.1.6.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-407CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Referenced assets2 URLs

By indicator

Full discourse1 post

Upwind Security MDR@UpwindMDR18h
🚨High - go-jose JWK RSA Parameter CPU DoS via PrivateKey.Validate (CVE-2026-116587) Go JOSE (go-jose) parses attacker-controlled RSA n/p/q from JWKs without size/consistency bounds, then hits crypto/rsa.PrivateKey.Validate (Go 1.24+) with cubic-time behavior on large/degenerate parameters. Remote attackers can exhaust CPU by sending crafted JWKs to any endpoint parsing untrusted keys. 👉Affected: http://github.com/go-jose/go-jose/v4 < 4.1.6; http://github.com/go-jose/go-jose/v3 | Upgrade to 4.1.6
00010110
371 followersView on X

Explore more

Back to dashboard