The vulnerability resides in the AesGcmCryptor.Open function, which forwards a caller‑supplied nonce directly to cipher.AEAD.Open without verifying its size. The Go standard library panics instead of returning an error when the nonce is not exactly NonceSize() bytes, causing the decrypting goroutine to abort. This behavior is categorized as CWE-248. The result is that any decryption operation involving a JWE with a malformed IV can be coerced into crashing the application, leading to a denial of service driven by attacker‑controlled input.

The affected product is Eclipse KeyPont GOSE from the Eclipse Foundation. No specific version ranges are listed, so any deployment that incorporates the vulnerable implementation of AesGcmCryptor.Open may be impacted.

The CVSS score of 6.9 indicates moderate severity. EPSS data is not available, and the vulnerability is not in the CISA KEV catalog, suggesting no known live exploits. The likely attack vector is an attacker sending a specially crafted JWE with an incorrectly sized IV to a system that uses this library, which triggers a panic and crashes the decrypting process, causing service disruption without privilege escalation or data exfiltration. Based on the information, the attack appears local to the service that receives the JWE payload, requiring remote access to trigger the vulnerable code path. Given the moderate severity and lack of public exploits, the risk remains moderate, yet any service that processes JWE should mitigate promptly.