CVE-2026-34986
HighAdvisory
Published 3 Apr 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.007
- 49th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 405
- of 17,787 indexed, latest versions
- Container images
- 401
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
Go JOSE Panics in JWE decryption
Carried by container images the latest versions of 405 of 17,787 indexed charts deploy, on 401 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v4.0.1, v4.0.2, v4.0.4, v4.0.5+4 more | 4.1.4 | 279 |
| github.com/ | v3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.2+2 more | 3.0.5 | 169 |
| github.com/ | v2.6.3+incompatible | no fix listed | 4 |
- OSV records
- GHSA-78h2-9frx-2jm8
- Also known as
- GO-2026-4945
Charts affected
405 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| istio-service-meshwbstack | 0.0.1 | 1 of 1See more | 6,232 |
| argo-eventswenerme | 2.4.27 | 1 of 1See more | 969 |
| wexa-studiowexa-studio | 1.2.0 | 4 of 15See more | 14,983 |
| registrywiremindVerified publisher | 0.1.1 | 1 of 1See more | 1,187 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 1 of 10See more | 9,381 |
Container images carrying it
401 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 97febecbe6cb | github.com/ github.com/ | 3.0.5 4.1.4 | 1 |
| ghcr.io/ | 50b431281d3e | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | c8882543f693 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | d22616a5998b | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 02348a19aeae | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 112fc427d933 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 72dc058e478d | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 167fd532bd43 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 73a2ebae4413 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | f312f50ddc57 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 96d600ae97b4 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | a5eee8cab215 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 0087cb49616f | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 06ed5db6cd33 | github.com/ github.com/ | 3.0.5 4.1.4 | 1 |
| ghcr.io/ | b914032ef9ad | github.com/ github.com/ | 3.0.5 4.1.4 | 1 |
| ghcr.io/ | a61c7022abcf | github.com/ github.com/ | 3.0.5 4.1.4 | 1 |
| ghcr.io/ | 832a32779e6d | github.com/ github.com/ | 3.0.5 4.1.4 | 1 |
| ghcr.io/ | 63f7eaf5aa8a | github.com/ github.com/ | 3.0.5 4.1.4 | 1 |
| ghcr.io/ | c62e3347611c | github.com/ github.com/ | 3.0.5 4.1.4 | 1 |
| ghcr.io/ | 528f2174fa2f | github.com/ github.com/ | 3.0.5 4.1.4 | 1 |
| ghcr.io/ | b3256cbc7b68 | github.com/ | 3.0.5 | 1 |
| ghcr.io/ | dd8a35d50c2d | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 5c109914ff73 | github.com/ | 3.0.5 | 1 |
| ghcr.io/ | 5dfa86b6451f | github.com/ | 3.0.5 | 1 |
| ghcr.io/ | b69bcdaa8492 | github.com/ | 3.0.5 | 1 |
| ghcr.io/ | 45e744fc623f | github.com/ | 3.0.5 | 1 |
| ghcr.io/ | 7ffcb25b4cfc | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 3a11ac10969e | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | bacc9b78ec61 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | c379e66246be | github.com/ github.com/ | 3.0.5 4.1.4 | 1 |
| ghcr.io/ | bf876252fbe1 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 3ebe2fd253f6 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 5bc5ca66d55a | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | d7f93d2182fe | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | d422a9ebd4a2 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 2434560e8f0e | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | a3ca4c02a5df | github.com/ | 3.0.5 | 1 |
| ghcr.io/ | b880da90aa1a | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 3776500fde82 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 8de11e2363fc | github.com/ | 3.0.5 | 1 |
| ghcr.io/ | f0c6f7d7daa6 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 1020638bbe23 | github.com/ | 3.0.5 | 1 |
| ghcr.io/ | aab0c99d313f | github.com/ | 3.0.5 | 1 |
| ghcr.io/ | 511231955463 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 0bcd60beb93f | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | ae8eb69c7b70 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 62517726d0c4 | github.com/ | 3.0.5 | 1 |
| ghcr.io/ | 22f84e3615c8 | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 91fca773a63f | github.com/ | 4.1.4 | 1 |
| ghcr.io/ | 89969b78fb07 | github.com/ | 4.1.4 | 1 |