https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T08:04:06.837879+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-89316 CVE-2026-89316 โ€” LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion 2026-10-25T08:04:06.840035+00:00

Affected: Eclipse Foundation Eclipse KeyPont - GOSE

`LoadPublicKey` resolved an EC key's curve with an unchecked type assertion, `algToOptsMap[alg].(*ECDSAOptions)`. A JWK declaring `"kty":"EC"` together with a non-EC `"alg"` โ€” which RFC 7517 ยง4.4 permits โ€” reaches that assertion and **panics**.