The JweRsaKeyEncryptionDecryptorImpl.Decrypt method forwards the initialization vector from a JSON Web Encryption token directly to the Go standard library’s cipher.AEAD.Open without validating its length. When the nonce is not exactly the size expected by GCM, the library panics rather than returning an error. The panic terminates the decrypting goroutine, leading to an application crash. This vulnerability does not provide remote code execution or data disclosure; it merely causes a denial of service by bringing down the decryption process.

The flaw resides in the Eclipse KeyPont GOSE component distributed by the Eclipse Foundation. No specific version range was supplied in the advisory, implying that all unpatched releases of Eclipse KeyPont GOSE may be affected until the vendor releases a patch that adds nonce‑length validation.

The CVSS score of 6.9 indicates a medium‑severity vulnerability. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting a limited but non‑negligible exploitation potential. An attacker can exploit the flaw by crafting a malicious JWE with an incorrectly sized IV and delivering it to a system that processes such tokens. Once the decrypt routine executes, the resulting panic causes the affected service to crash, enabling an availability attack. No privileged conditions are required beyond the ability to supply a JWE to the target system.