https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T01:55:12.694494+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-89314 CVE-2026-89314 — Quadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 s 2026-10-25T01:55:12.695762+00:00

Affected: Eclipse Foundation Eclipse KeyPont - GOSE

`jwkFields.CheckConsistency` detected duplicate `key_ops` entries with a pairwise nested loop, making validation cost grow with the **square** of the entry count. Because the check runs on every JWK and JWKS unmarshal, a modestly sized but hostile JWKS document could occupy a CPU core for many seconds.