CVE-2026-65625 | potatosalad jose up to 1.11.12 AES-GCM block_decrypt/gcm_block_decrypt signature verification

October 26, 2026 Yanac

A vulnerability classified as critical was found in potatosalad jose up to 1.11.12. This impacts the function block_decrypt/gcm_block_decrypt of the component AES-GCM. Executing a manipulation can lead to improper verification of cryptographic signature.

This vulnerability is tracked as CVE-2026-65625. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More