K000163145: Go JOSE vulnerability CVE-2026-34986

🗓️ 31 Aug 2026 20:31:35Reported by f5Type

f5🔗 my.f5.com👁 7 Views

Go JOSE before 4.1.4/3.0.5 panics on empty encrypted_key in JWE causing DoS.

Reporter	Title	Published	Views	Family All 1219
RedhatCVE	CVE-2026-34986	7 Apr 202600:47	–	redhatcve
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.27.1 Release.	23 Apr 202614:43	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: RHACS 4.8.11 security and bug fix update	27 Apr 202620:25	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: RHACS 4.8.11 security and bug fix update	27 Apr 202623:24	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.7.10	29 Apr 202607:00	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.6.15	29 Apr 202612:20	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Quay 3.12.17	29 Apr 202617:11	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Quay 3.10.21	29 Apr 202621:18	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Quay 3.9.21	30 Apr 202601:20	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.2	30 Apr 202606:52	–	redhat

Vulners

Node

f5 big-ip_next_cnfRange2.0.0–2.2.1

f5 big-ip_next_cnfRange1.1.0–1.4.2

f5 big-ip_nextRange2.0.0–2.2.1kubernetes

31 Aug 2026 20:31Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

EPSS0.00651

SSVC