Search threats, CVEs… ⌘K
Back to vendor advisories
Microsoft Security Response CenterCVE-2026-116587

Go JOSE: DoS when parsing JWKs that contain RSA keys

MediumVendor CVSS 7.5 / 10 1 CVE Published Oct 31, 2026 at 1:09 AM UTC
Get alerts for azl3 azcopy 10.25.1-9 on Azure Linux

Summary

Mariner

Products covered

  • azl3 azcopy 10.25.1-9 on Azure Linux 3.0

  • azl3 cert-manager 1.12.15-14 on Azure Linux 3.0

  • azl3 containerd2 2.3.4-1 on Azure Linux 3.0

  • azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0

  • azl3 dcos-cli 1.2.0-22 on Azure Linux 3.0

  • azl3 ignition-flatcar 2.22.0-6 on Azure Linux 3.0

  • azl3 influxdb 2.7.5-21 on Azure Linux 3.0

  • azl3 keda 2.14.1-19 on Azure Linux 3.0

Show 7 more products

  • azl3 kubernetes 1.30.10-30 on Azure Linux 3.0

  • azl3 libcontainers-common 20240213-3 on Azure Linux 3.0

  • azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0

  • azl3 packer 1.9.5-21 on Azure Linux 3.0

  • azl3 skopeo 1.14.4-13 on Azure Linux 3.0

  • azl3 telegraf 1.31.0-33 on Azure Linux 3.0

  • azl3 vitess 19.0.4-14 on Azure Linux 3.0

Remediation

Release Notes

CVEs in this advisory 1

CVE-2026-116587

Updates

  1. Published by Microsoft Security Response Center

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

Keep investigating
See every advisory from this vendor