Search: CVE-2026-89086

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.3%	CVE-2026-89086OCaml jose · Improper Verification of Cryptographic Signature Critical9.1EPSS 0.3%2026-09-10CVE Database V5CVE-2026-89086 In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed to declare the signature valid without the required steps that involve the public key. EPSS 0.3%Vulnerability OCaml #cwe-347	CVE Database V5	2026-09-10

Page 1 of 1