Product by Eclipse Foundation

    Eclipse Keypont - Gose

    9 known vulnerabilities in Eclipse Keypont - Gose (Eclipse Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Eclipse Keypont - Gose (Eclipse Foundation)
    HighCVE-2026-89320

    Eclipse KeyPont - GOSE: Improper Validation of Integrity Check Value

    —
    MediumCVE-2026-89312

    Eclipse KeyPont - GOSE: Uncaught Exception

    —
    MediumCVE-2026-89315

    Eclipse KeyPont - GOSE: Uncaught Exception

    —
    MediumCVE-2026-89314

    Quadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 s

    —
    MediumCVE-2026-89318

    Eclipse KeyPont - GOSE: Uncaught Exception

    —
    MediumCVE-2026-89313

    Eclipse KeyPont - GOSE: Use of Incorrectly-Resolved Name or Reference

    —
    MediumCVE-2026-89319

    Eclipse KeyPont - GOSE: Improper Validation of Array Index

    —
    MediumCVE-2026-89316

    Eclipse KeyPont - GOSE: Uncaught Exception

    —
    MediumCVE-2026-89317

    JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11)

    —

    All products by Eclipse Foundation