Security advisory for CVE-2026-34986 in github
ROOT-APP-GOBINARY-CVE-2026-34986
Full advisory details, affected packages, severity context, and original source.
Affected technology
Advisory overview
Root has patched CVE-2026-34986 in the github.com/go-jose/go-jose/v4 package for Root:Go. Multiple fixed versions available.
Affected packages and releases
Root:Go / github.com/go-jose/go-jose/v4
introduced: 0 · fixed: v4.1.3-aikido.2 · fixed: v4.1.0-aikido.2 · fixed: v4.1.2-aikido.1 · fixed: v4.1.3-aikido.3 · fixed: v4.1.0-aikido.3
Root:Go / github.com/go-jose/go-jose/v3
introduced: 0 · fixed: v3.0.3-aikido.2 · fixed: v3.0.4-aikido.1 · fixed: v3.0.4-aikido.2
Root:Go / rootio-github.com/go-jose/go-jose/v4
introduced: 0 · fixed: v4.1.0-root.io.1 · fixed: v4.1.3-root.io.1 · fixed: v4.1.3-root.io.2 · fixed: v4.1.0-root.io.2 · fixed: v4.1.2-root.io.1 · fixed: v4.1.3-root.io.3 · fixed: v4.1.0-root.io.3
Root:Go / rootio-github.com/go-jose/go-jose/v3
introduced: 0 · fixed: v3.0.3-root.io.1 · fixed: v3.0.3-root.io.2 · fixed: v3.0.4-root.io.1 · fixed: v3.0.4-root.io.2