CVE-2026-53938

creationtimestamp| type| source ---|---|--- 2026-09-09 01:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv2dkbj3cd2e...

CVE-2026-53938

OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms alg = A128KW, A192KW, A256KW does not validate the length of the attacker-supplied encryptedkey JWE...