CVE-2026-116586

A flaw was found in go-jose. A remote attacker could cause a Denial of Service DoS by submitting specially crafted, deeply nested JSON JavaScript Object Notation input to an affected application. When parsing these deeply nested arrays or objects, the system exceeds its stack memory limits,...