CVE-2016-9121

CVE-2016-9121 describes an invalid curve attack vulnerability in go-jose versions prior to 1.0.4, specifically impacting the ECDH-ES algorithm when deriving shared keys for encrypted messages. The flaw arises because go-jose failed to validate that a received public key was on the same curve as the receiver's static private key. This critical vulnerability, with a CVSS score of 9.1, allows for high impact to confidentiality and integrity due to its network-based attack vector and low attack complexity. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.