{"uuid": "6045e87e-e287-4007-8419-5a4be61432e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv73jddkdh2j", "content": "CVE-2026-89086 - jose\nThe jose software for OCaml versions earlier than 0.11.0 can mistakenly treat an RSA signature as valid even when it was not created with the correct public key. This means an attacker could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jose #ocaml #CVE #infosec", "creation_timestamp": "2026-09-10T22:20:04.729346Z"}