Description (CNA)
`JwksTrustStore.Get` assigned each parsed key to the function's **named return value** while refreshing the JWKS cache. When the requested `kid` was not present, the trailing naked `return` handed the caller the last key in the JWKS document together with a `nil` error — a confidently wrong answer instead of "not found".
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Eclipse Foundation / Eclipse KeyPont - GOSE | affected 0.7.5 through 0.13.0-rc1 |
| Eclipse Foundation / Eclipse KeyPont - GOSE | affected 0 before 1.0.0-rc4 |
CWE
CWE-706