CVE-2026-65626 | potatosalad jose up to 1.11.12 PKCS1 Decryption jose_jwa_pkcs1.erl eme_pkcs1_decode/rsaes_pkcs1_decrypt missing encryption

October 26, 2026 Yanac

A vulnerability, which was classified as problematic, was found in potatosalad jose up to 1.11.12. This affects the function eme_pkcs1_decode/rsaes_pkcs1_decrypt of the file jose_jwa_pkcs1.erl of the component PKCS1 Decryption. Executing a manipulation can lead to missing encryption of sensitive data.

This vulnerability is registered as CVE-2026-65626. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More