CVE-2026-116586

ADVISORY - github

Summary

Parsing deeply nested JSON structures can hit Go's stack limit, causing the application to crash.

Note: this advisory is the same as https://github.com/go-jose/go-jose/security/advisories/GHSA-6mp9-8xrw-74r4.

Impact

Denial of service vulnerability. Any application that parses untrusted JSON via go-jose is exposed.

Workarounds

Reject large inputs before parsing them.

Acknowledgements

Thanks to Dohyun Kim (@azza999), Joshua Rogers of AISLE Research, and Sueun Cho for alerting us to the need to patch this.

EPSS Score⁠: 0.00292 (0.217)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-674⁠

Uncontrolled Recursion

ADVISORY - github

CWE-674⁠

Uncontrolled Recursion

Impacted images

Advisories

NIST

CREATED

3 days ago

UPDATED

2 days ago

ADVISORY IDCVE-2026-116586⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-674⁠

CVSS SCORE

6.9medium

GitHub

CREATED

1 day ago

UPDATED

1 day ago

ADVISORY IDGHSA-vvm8-gf78-28g4⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-674⁠

CVSS SCORE

6.9medium

Ubuntu

CREATED

1 day ago

UPDATED

1 day ago

ADVISORY IDCVE-2026-116586⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Chainguard

CREATED

58 minutes ago

UPDATED

58 minutes ago

ADVISORY ID

CGA-3mpj-4fpp-hghm

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-2px7-29cf-7q95

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-36qq-pcp3-67rf

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-3g94-5wxw-w946

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-3hr3-g42v-5g95

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-4776-2p68-8qxr

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-47x5-q4qm-m296

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-494v-xm8j-fjmh

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-4g87-69cf-9cg2

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-4qpj-hq3w-x6p8

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-5wvf-7cwf-hr6c

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-63mw-7x62-74g8

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-66gc-q8ww-7hpm

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-678g-j8r5-4v76

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-6c5j-g68q-wv84

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-78x5-4rc7-w6p5

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-79qx-fv5p-jvpf

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-7g96-7f44-vhpx

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-834g-262f-p463

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-84vc-ph8c-827r

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-86cj-j743-q6r2

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-89hx-mjhq-mc27

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-8c44-9c8v-8499

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-8cmq-3gqf-xp4q

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-8gmx-xwp5-v8rf

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-8jh9-x7j7-chvv

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-8w75-2hfr-frh3

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-95pg-8xfm-j329

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-98xp-rq4j-r23f

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-9g9g-qcvp-6q4c

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-9rwg-g3cm-f6p5

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-9w2w-5pf7-whg5

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-c6mr-r3q5-hj86

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-ch39-6x34-prph

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-cvc5-v5cr-48m2

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-f5h9-q6h6-9x4q

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-f7hq-f83h-qm8r

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-g83h-j978-cvhm

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-g97v-h5m4-v3c2

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-grf7-ghpp-4q37

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-h98w-5w38-vg9r

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-hq38-865p-f4v5

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-j89x-564m-rmfw

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-jqh9-jjfq-r6wg

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-m23c-p5q3-pf7q

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-m3xg-jx8w-vg5f

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-pq5r-45w6-pwf4

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-pqm8-vwj8-6jv7

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-prh4-5r76-pjq8

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-q4hm-ffmg-r65p

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-q6r6-2vpj-j8gc

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-q8gh-gxgp-8c7h

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-qfqf-4mjf-6mx5

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-r283-rhh7-v936

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-r3xh-4mwj-vwfm

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-r4h2-h2c3-xpjv

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-r5qx-rv5w-9vwx

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-rvr5-7ffp-chj7

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-v3qr-53f2-rwwp

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-vcgq-rf6c-q8vp

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-vf9w-g828-x2cr

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-vg9w-3g93-p472

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-vwm3-p44c-r29j

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-w55x-5q67-92m7

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-w7j2-vrw5-fh64

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-wfg6-pjph-25j7

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-wv7j-gvgm-r8r8

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-x3g3-c3j8-6vqc

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-xgr6-prfh-q682

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-xvp4-h278-fc79

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY