MiracleLinux 8 : mod_auth_openidc:2.3 cjose-0.6.1-6.module+el8+2074+697a2d2d, mod_auth_openidc-2.4.9.4-9.module+el8+2074+697a2d2d (AXSA:2026-2245:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2245:01 advisory. cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption CVE-2026-53939 Tenable has extracted the preceding description bloc...