CVE-2026-29000

CVE-2026-29000 Lab Lab Java/SparkJava simulant l'erreur d'authentification JWT/JWE liée à CVE-2026-29000. L'application tourne sur le port 4567 et fournit des API pour tester le flux de connexion valide, créer un jeton falsifié et vérifier le tableau de bord. Informations sur le CVE CVE-2026-2900...

CVE-2026-9793

A flaw was found in Keycloak. When a JSON Web Encryption JWE encrypted request object is submitted, Keycloak may incorrectly process unsigned claims if the decrypted content is raw JSON, bypassing the configured signature policy. This allows a remote attacker to submit unauthorized claims, leadin...

SUSE-SU-2026:1935-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-34986: github.com/go-jose/go-jose/v4: processing of JWE object with empty encryptedkey field but key wrapping algorithm set can lead to a denial of service bsc1262936...

OPENSUSE-SU-2026:20669-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-34986: github.com/go-jose/go-jose/v4: processing of JWE object with empty encryptedkey field but key wrapping algorithm set can lead to a denial of service bsc1262936...