CVE-2026-89314
MEDIUM—CVSS v3
—CVSS v2
—
EPSS (exploit probability)
CWE-407CWE
Description
`jwkFields.CheckConsistency` detected duplicate `key_ops` entries with a pairwise nested loop, making validation cost grow with the **square** of the entry count. Because the check runs on every JWK and JWKS unmarshal, a modestly sized but hostile JWKS document could occupy a CPU core for many seconds.
Affected routers (0)
No routers currently mapped to this CVE in our database.