CVE-2026-29000

CVE-2026-29000 Lab CVE-2026-29000과 관련된 JWT/JWE 인증 취약점을 시뮬레이션하는 Java/SparkJava 랩입니다. 애플리케이션은 4567 포트에서 실행되며, 유효한 로그인 흐름, 위조 토큰 생성, 대시보드 확인을 테스트할 수 있는 API를 제공합니다. CVE 정보 CVE-2026-29000은 4.5.9, 5.7.9, 6.3.3 이전 버전의 pac4j-jwt에 영향을 미칩니다. 이 취약점은 JwtAuthenticator가 암호화된 JWT/JWE를 처리할 때 발생하며, 특정 인증 흐름에서 공격자...

CVE-2026-9793

A flaw was found in Keycloak. When a JSON Web Encryption JWE encrypted request object is submitted, Keycloak may incorrectly process unsigned claims if the decrypted content is raw JSON, bypassing the configured signature policy. This allows a remote attacker to submit unauthorized claims, leadin...

SUSE-SU-2026:1935-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-34986: github.com/go-jose/go-jose/v4: processing of JWE object with empty encryptedkey field but key wrapping algorithm set can lead to a denial of service bsc1262936...

OPENSUSE-SU-2026:20669-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-34986: github.com/go-jose/go-jose/v4: processing of JWE object with empty encryptedkey field but key wrapping algorithm set can lead to a denial of service bsc1262936...