THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-34986 (HIGH 7.5) — Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JW

[NVD] CVE-2026-34986 (HIGH 7.5) — Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JW

lownvdPublished 2026-04-06

CVE-2026-34986 CVSS: 7.5 HIGH Published: 2026-04-06T17:17:11.870

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-34986cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-34986