Tink Go
Monthly
Malformed keyset acceptance in Tink-Go through 2.8.0 allows unauthenticated remote attackers to bypass structural validation via keyset.NewHandleWithNoSecrets() or ReadWithNoSecrets(), causing malformed public or no-secret keysets (e.g., an enabled key without a valid primary, or a DESTROYED key with no KeyData) to be accepted. This integrity flaw can mislead downstream consumers such as jwt.JWKSetFromPublicKeysetHandle() into producing a JWK set from an invalid handle. Publicly available exploit code exists, but no active exploitation (CISA KEV) has been confirmed; the impact is limited to integrity with no secret disclosure or code execution.
Malformed keyset acceptance in Tink-Go through 2.8.0 allows unauthenticated remote attackers to bypass structural validation via keyset.NewHandleWithNoSecrets() or ReadWithNoSecrets(), causing malformed public or no-secret keysets (e.g., an enabled key without a valid primary, or a DESTROYED key with no KeyData) to be accepted. This integrity flaw can mislead downstream consumers such as jwt.JWKSetFromPublicKeysetHandle() into producing a JWK set from an invalid handle. Publicly available exploit code exists, but no active exploitation (CISA KEV) has been confirmed; the impact is limited to integrity with no secret disclosure or code execution.