Known vulnerabilities in OCaml jose
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-89086 | In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1… | 9.1 Critical | Sep 10, 2026 |