Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-89086 1 Ocaml 1 Jose 2026-09-13 9.1 Critical
In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed to declare the signature valid without the required steps that involve the public key.