CVE-2026-89316
— UNSCOREDpublic exploit availablePublished 2026-10-23 · Updated 2026-10-23
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
`LoadPublicKey` resolved an EC key's curve with an unchecked type assertion, `algToOptsMap[alg].(*ECDSAOptions)`. A JWK declaring `"kty":"EC"` together with a non-EC `"alg"` — which RFC 7517 §4.4 permits — reaches that assertion and **panics**.
Weaknesses
CWE-248
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100347PoC
- MEDIUMCVE-2026-100675PoC
- MEDIUMCVE-2026-100722PoC
- MEDIUMCVE-2026-101035PoC
- MEDIUMCVE-2026-101101PoC
- MEDIUMCVE-2026-101918PoC
- HIGHCVE-2026-102281PoC
- MEDIUMCVE-2026-102413
Related by shared AI tags and CWE weakness class. Browse the full archive.