The Lab · 2026-04-03 06:27:01 · GitHub Issues
A critical security vulnerability in the widely-used `go-jose/v4` library for Go can cause applications to crash when processing malformed JSON Web Encryption (JWE) objects. The flaw, tracked as CVE-2026-34986, triggers a panic in the decryption process if a JWE object uses a key wrapping algorithm (denoted by an `alg`...
The Lab · 2026-04-03 20:27:11 · GitHub Issues
A critical security update has been issued for the widely-used `go-jose/v4` library, patching a high-severity denial-of-service vulnerability. The flaw, tracked as CVE-2026-34986 with a CVSS score of 7.5, could cause applications to crash when processing malformed encrypted data, posing a significant risk to service st...
The Lab · 2026-04-04 03:26:56 · GitHub Issues
A critical security update has been released for the widely-used Go-JOSE library, addressing a vulnerability that can cause a panic and crash during the decryption of certain JSON Web Encryption (JWE) objects. The flaw, tracked as CVE-2026-34986, is triggered when a JWE object uses a key wrapping algorithm (those endin...