CVE Intelligence

Ocaml Jose vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ocaml Jose: 1 record(s), with affected versions and fixes.

CVE-2026-89086 Critical · 9.1 CWE-347 Sep 10, 2026
Improper Verification of Cryptographic Signature in Ocaml Jose
In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed to declare the signature valid without the required steps that involve the public key.