CVE-2026-65629 | potatosalad jose up to 1.11.12 PBES2 Scheme src/jwk/jose_jwk_der.erl jose_jwk_der:to_binary weak password hash

October 26, 2026 Yanac

A vulnerability marked as problematic has been reported in potatosalad jose up to 1.11.12. The affected element is the function jose_jwk_der:to_binary of the file src/jwk/jose_jwk_der.erl of the component PBES2 Scheme. This manipulation causes password hash with insufficient computational effort.

The identification of this vulnerability is CVE-2026-65629. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More