CVE-2026-65627 | potatosalad jose up to 1.11.12 JWE Decompression src/jwe/jose_jwe_zip.erl jose_jwe_zip.uncompress resource consumption

October 26, 2026 Yanac

A vulnerability categorized as problematic has been discovered in potatosalad jose up to 1.11.12. This vulnerability affects the function jose_jwe_zip.uncompress of the file src/jwe/jose_jwe_zip.erl of the component JWE Decompression. Executing a manipulation can lead to resource consumption.

This vulnerability is handled as CVE-2026-65627. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More