Threats tagged 'oesa-2026-4066'

CVE-2026-92091 is a medium severity denial of service vulnerability in the jwcrypto library used by Red Hat Ansible Automation Platform 2. The issue arises from an inefficient algorithm in the JWK.import_key() function that validates the key_ops member with quadratic time complexity and no length bound. An unauthenticated remote attacker can exploit this by supplying a JWK with a large key_ops array, causing excessive CPU consumption and service disruption. No specific affected versions or patch information are provided by the vendor.