EK
Product
Eclipse KeyPont - GOSE
by Eclipse Foundation · last CVE Oct 23, 2026
9
CVEs
0
On KEV
8.8
Max CVSS
9
New 30D
Severity mix
Critical 0High 1Medium 8Low 0
Watch

Add Eclipse KeyPont - GOSE to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-89320
New
8.8
0%
Oct 23
HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrity
Affected: 0.9.0 through 0.13.0-rc1; before 1.0.0-rc1
Showing 1