CVE-2026-65627

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-65627", "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "state": "PUBLISHED", "assignerShortName": "EEF", "dateReserved": "2026-07-22T13:58:26.233Z", "datePublished": "2026-10-26T19:53:16.336Z", "dateUpdated": "2026-11-02T21:25:56.908Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://repo.hex.pm", "cpes": ["cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["jose_jwe_zip", "jose_jwe", "'Elixir.JOSE.JWE'"], "packageName": "jose", "packageURL": "pkg:hex/jose", "product": "jose", "programFiles": ["src/jwe/jose_jwe_zip.erl", "src/jwe/jose_jwe.erl", "lib/jose/jwe.ex"], "programRoutines": [{"name": "jose_jwe_zip:uncompress/2"}, {"name": "jose_jwe:block_decrypt/2"}, {"name": "'Elixir.JOSE.JWE':block_decrypt/2"}], "repo": "https://github.com/potatosalad/erlang-jose", "vendor": "potatosalad", "versions": [{"lessThan": "1.11.13", "status": "affected", "version": "1.0.0", "versionType": "semver"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["jose_jwe_zip", "jose_jwe", "'Elixir.JOSE.JWE'"], "packageName": "potatosalad/erlang-jose", "packageURL": "pkg:github/potatosalad/erlang-jose", "product": "jose", "programFiles": ["src/jwe/jose_jwe_zip.erl", "src/jwe/jose_jwe.erl", "lib/jose/jwe.ex"], "programRoutines": [{"name": "jose_jwe_zip:uncompress/2"}, {"name": "jose_jwe:block_decrypt/2"}, {"name": "'Elixir.JOSE.JWE':block_decrypt/2"}], "repo": "https://github.com/potatosalad/erlang-jose", "vendor": "potatosalad", "versions": [{"lessThan": "857eb8e7f2d33e2c9ca2189e77226561cacaf2ad", "status": "affected", "version": "a7746ecd4950f85a393136e449a91dac62b5c429", "versionType": "git"}]}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*", "versionEndExcluding": "1.11.13", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "credits": [{"lang": "en", "type": "reporter", "value": "Peter Ullrich"}, {"lang": "en", "type": "remediation developer", "value": "Andrew Bennett"}, {"lang": "en", "type": "analyst", "value": "Jonatan M\u00e4nnchen / EEF"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small crafted JWE token.</p>\n<p>The <code>jose_jwe_zip:uncompress/2</code> function in <code>src/jwe/jose_jwe_zip.erl</code> decompresses the DEFLATE-compressed plaintext of a JWE that carries the optional <code>zip: DEF</code> header by calling <code>zlib:inflate/2</code> on the entire attacker-controlled stream, with no bound on the output size or the inflation ratio. Raw DEFLATE reaches ratios around 1000:1 on highly repetitive input, so a few-kilobyte token inflates to hundreds of megabytes or gigabytes in a single call.</p>\n<p>Decompression runs automatically during decryption through <code>jose_jwe:block_decrypt/2</code> (<code>JOSE.JWE.block_decrypt/2</code> in Elixir), before the recipient can inspect or reject the payload. With the common asymmetric key-management algorithms (RSA-OAEP, ECDH-ES) an attacker needs only the recipient's public key to craft such a token, so no authentication or secret material is required. A single small token can exhaust the node's memory and crash the BEAM, denying service to all users.</p>\n<p>This issue affects jose: from 1.0.0 before 1.11.13.</p>"}, {"base64": false, "type": "text/markdown", "value": "Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small crafted JWE token.\n\nThe `jose_jwe_zip:uncompress/2` function in `src/jwe/jose_jwe_zip.erl` decompresses the DEFLATE-compressed plaintext of a JWE that carries the optional `zip: DEF` header by calling `zlib:inflate/2` on the entire attacker-controlled stream, with no bound on the output size or the inflation ratio. Raw DEFLATE reaches ratios around 1000:1 on highly repetitive input, so a few-kilobyte token inflates to hundreds of megabytes or gigabytes in a single call.\n\nDecompression runs automatically during decryption through `jose_jwe:block_decrypt/2` (`JOSE.JWE.block_decrypt/2` in Elixir), before the recipient can inspect or reject the payload. With the common asymmetric key-management algorithms (RSA-OAEP, ECDH-ES) an attacker needs only the recipient's public key to craft such a token, so no authentication or secret material is required. A single small token can exhaust the node's memory and crash the BEAM, denying service to all users.\n\nThis issue affects jose: from 1.0.0 before 1.11.13."}], "value": "Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small crafted JWE token.\n\nThe jose_jwe_zip:uncompress/2 function in src/jwe/jose_jwe_zip.erl decompresses the DEFLATE-compressed plaintext of a JWE that carries the optional zip: DEF header by calling zlib:inflate/2 on the entire attacker-controlled stream, with no bound on the output size or the inflation ratio. Raw DEFLATE reaches ratios around 1000:1 on highly repetitive input, so a few-kilobyte token inflates to hundreds of megabytes or gigabytes in a single call.\n\nDecompression runs automatically during decryption through jose_jwe:block_decrypt/2 (JOSE.JWE.block_decrypt/2 in Elixir), before the recipient can inspect or reject the payload. With the common asymmetric key-management algorithms (RSA-OAEP, ECDH-ES) an attacker needs only the recipient's public key to craft such a token, so no authentication or secret material is required. A single small token can exhaust the node's memory and crash the BEAM, denying service to all users.\n\nThis issue affects jose: from 1.0.0 before 1.11.13."}], "impacts": [{"capecId": "CAPEC-130", "descriptions": [{"lang": "en", "value": "CAPEC-130 Excessive Allocation"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "baseScore": 6.9, "baseSeverity": "MEDIUM", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-409", "description": "CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", "dateUpdated": "2026-10-26T19:53:16.336Z"}, "references": [{"tags": ["vendor-advisory", "related"], "url": "https://github.com/potatosalad/erlang-jose/security/advisories/GHSA-wfpv-qxp8-x5gm"}, {"name": "EEF CNA record for CVE-2026-65627", "tags": ["related"], "url": "https://cna.erlef.org/cves/CVE-2026-65627.html"}, {"name": "OSV record EEF-CVE-2026-65627", "tags": ["related"], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-65627"}, {"name": "Introducing commit a7746ec in potatosalad/erlang-jose", "tags": ["related"], "url": "https://github.com/potatosalad/erlang-jose/commit/a7746ecd4950f85a393136e449a91dac62b5c429"}, {"name": "Fix commit 857eb8e in potatosalad/erlang-jose", "tags": ["patch"], "url": "https://github.com/potatosalad/erlang-jose/commit/857eb8e7f2d33e2c9ca2189e77226561cacaf2ad"}], "source": {"discovery": "EXTERNAL"}, "title": "Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Reject JWE tokens that carry a <code>zip</code> header before passing them to <code>jose_jwe:block_decrypt/2</code>. DEFLATE compression is rarely used in legitimate JWE traffic, so untrusted tokens whose protected header contains <code>zip: DEF</code> can be inspected and filtered out before decryption.</p>"}, {"base64": false, "type": "text/markdown", "value": "Reject JWE tokens that carry a `zip` header before passing them to `jose_jwe:block_decrypt/2`. DEFLATE compression is rarely used in legitimate JWE traffic, so untrusted tokens whose protected header contains `zip: DEF` can be inspected and filtered out before decryption."}], "value": "Reject JWE tokens that carry a zip header before passing them to jose_jwe:block_decrypt/2. DEFLATE compression is rarely used in legitimate JWE traffic, so untrusted tokens whose protected header contains zip: DEF can be inspected and filtered out before decryption."}]}, "adp": [{"references": [{"url": "https://github.com/potatosalad/erlang-jose/security/advisories/GHSA-wfpv-qxp8-x5gm", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-02T21:25:06.662495Z", "id": "CVE-2026-65627", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T21:25:56.908Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-65627", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-02T21:25:06.662495Z"}}}], "references": [{"url": "https://github.com/potatosalad/erlang-jose/security/advisories/GHSA-wfpv-qxp8-x5gm", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T21:25:24.569Z"}}], "cna": {"title": "Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "Peter Ullrich"}, {"lang": "en", "type": "remediation developer", "value": "Andrew Bennett"}, {"lang": "en", "type": "analyst", "value": "Jonatan M\u00e4nnchen / EEF"}], "impacts": [{"capecId": "CAPEC-130", "descriptions": [{"lang": "en", "value": "CAPEC-130 Excessive Allocation"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*"], "repo": "https://github.com/potatosalad/erlang-jose", "vendor": "potatosalad", "modules": ["jose_jwe_zip", "jose_jwe", "'Elixir.JOSE.JWE'"], "product": "jose", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "1.11.13", "versionType": "semver"}], "packageURL": "pkg:hex/jose", "packageName": "jose", "programFiles": ["src/jwe/jose_jwe_zip.erl", "src/jwe/jose_jwe.erl", "lib/jose/jwe.ex"], "collectionURL": "https://repo.hex.pm", "defaultStatus": "unaffected", "programRoutines": [{"name": "jose_jwe_zip:uncompress/2"}, {"name": "jose_jwe:block_decrypt/2"}, {"name": "'Elixir.JOSE.JWE':block_decrypt/2"}]}, {"cpes": ["cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*"], "repo": "https://github.com/potatosalad/erlang-jose", "vendor": "potatosalad", "modules": ["jose_jwe_zip", "jose_jwe", "'Elixir.JOSE.JWE'"], "product": "jose", "versions": [{"status": "affected", "version": "a7746ecd4950f85a393136e449a91dac62b5c429", "lessThan": "857eb8e7f2d33e2c9ca2189e77226561cacaf2ad", "versionType": "git"}], "packageURL": "pkg:github/potatosalad/erlang-jose", "packageName": "potatosalad/erlang-jose", "programFiles": ["src/jwe/jose_jwe_zip.erl", "src/jwe/jose_jwe.erl", "lib/jose/jwe.ex"], "collectionURL": "https://github.com", "defaultStatus": "unaffected", "programRoutines": [{"name": "jose_jwe_zip:uncompress/2"}, {"name": "jose_jwe:block_decrypt/2"}, {"name": "'Elixir.JOSE.JWE':block_decrypt/2"}]}], "references": [{"url": "https://github.com/potatosalad/erlang-jose/security/advisories/GHSA-wfpv-qxp8-x5gm", "tags": ["vendor-advisory", "related"]}, {"url": "https://cna.erlef.org/cves/CVE-2026-65627.html", "name": "EEF CNA record for CVE-2026-65627", "tags": ["related"]}, {"url": "https://osv.dev/vulnerability/EEF-CVE-2026-65627", "name": "OSV record EEF-CVE-2026-65627", "tags": ["related"]}, {"url": "https://github.com/potatosalad/erlang-jose/commit/a7746ecd4950f85a393136e449a91dac62b5c429", "name": "Introducing commit a7746ec in potatosalad/erlang-jose", "tags": ["related"]}, {"url": "https://github.com/potatosalad/erlang-jose/commit/857eb8e7f2d33e2c9ca2189e77226561cacaf2ad", "name": "Fix commit 857eb8e in potatosalad/erlang-jose", "tags": ["patch"]}], "workarounds": [{"lang": "en", "value": "Reject JWE tokens that carry a zip header before passing them to jose_jwe:block_decrypt/2. DEFLATE compression is rarely used in legitimate JWE traffic, so untrusted tokens whose protected header contains zip: DEF can be inspected and filtered out before decryption.", "supportingMedia": [{"type": "text/html", "value": "<p>Reject JWE tokens that carry a <code>zip</code> header before passing them to <code>jose_jwe:block_decrypt/2</code>. DEFLATE compression is rarely used in legitimate JWE traffic, so untrusted tokens whose protected header contains <code>zip: DEF</code> can be inspected and filtered out before decryption.</p>", "base64": false}, {"type": "text/markdown", "value": "Reject JWE tokens that carry a `zip` header before passing them to `jose_jwe:block_decrypt/2`. DEFLATE compression is rarely used in legitimate JWE traffic, so untrusted tokens whose protected header contains `zip: DEF` can be inspected and filtered out before decryption.", "base64": false}]}], "descriptions": [{"lang": "en", "value": "Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small crafted JWE token.\n\nThe jose_jwe_zip:uncompress/2 function in src/jwe/jose_jwe_zip.erl decompresses the DEFLATE-compressed plaintext of a JWE that carries the optional zip: DEF header by calling zlib:inflate/2 on the entire attacker-controlled stream, with no bound on the output size or the inflation ratio. Raw DEFLATE reaches ratios around 1000:1 on highly repetitive input, so a few-kilobyte token inflates to hundreds of megabytes or gigabytes in a single call.\n\nDecompression runs automatically during decryption through jose_jwe:block_decrypt/2 (JOSE.JWE.block_decrypt/2 in Elixir), before the recipient can inspect or reject the payload. With the common asymmetric key-management algorithms (RSA-OAEP, ECDH-ES) an attacker needs only the recipient's public key to craft such a token, so no authentication or secret material is required. A single small token can exhaust the node's memory and crash the BEAM, denying service to all users.\n\nThis issue affects jose: from 1.0.0 before 1.11.13.", "supportingMedia": [{"type": "text/html", "value": "<p>Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small crafted JWE token.</p>\n<p>The <code>jose_jwe_zip:uncompress/2</code> function in <code>src/jwe/jose_jwe_zip.erl</code> decompresses the DEFLATE-compressed plaintext of a JWE that carries the optional <code>zip: DEF</code> header by calling <code>zlib:inflate/2</code> on the entire attacker-controlled stream, with no bound on the output size or the inflation ratio. Raw DEFLATE reaches ratios around 1000:1 on highly repetitive input, so a few-kilobyte token inflates to hundreds of megabytes or gigabytes in a single call.</p>\n<p>Decompression runs automatically during decryption through <code>jose_jwe:block_decrypt/2</code> (<code>JOSE.JWE.block_decrypt/2</code> in Elixir), before the recipient can inspect or reject the payload. With the common asymmetric key-management algorithms (RSA-OAEP, ECDH-ES) an attacker needs only the recipient's public key to craft such a token, so no authentication or secret material is required. A single small token can exhaust the node's memory and crash the BEAM, denying service to all users.</p>\n<p>This issue affects jose: from 1.0.0 before 1.11.13.</p>", "base64": false}, {"type": "text/markdown", "value": "Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small crafted JWE token.\n\nThe `jose_jwe_zip:uncompress/2` function in `src/jwe/jose_jwe_zip.erl` decompresses the DEFLATE-compressed plaintext of a JWE that carries the optional `zip: DEF` header by calling `zlib:inflate/2` on the entire attacker-controlled stream, with no bound on the output size or the inflation ratio. Raw DEFLATE reaches ratios around 1000:1 on highly repetitive input, so a few-kilobyte token inflates to hundreds of megabytes or gigabytes in a single call.\n\nDecompression runs automatically during decryption through `jose_jwe:block_decrypt/2` (`JOSE.JWE.block_decrypt/2` in Elixir), before the recipient can inspect or reject the payload. With the common asymmetric key-management algorithms (RSA-OAEP, ECDH-ES) an attacker needs only the recipient's public key to craft such a token, so no authentication or secret material is required. A single small token can exhaust the node's memory and crash the BEAM, denying service to all users.\n\nThis issue affects jose: from 1.0.0 before 1.11.13.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-409", "description": "CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "1.11.13", "versionStartIncluding": "1.0.0"}], "operator": "OR"}], "operator": "AND"}], "providerMetadata": {"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", "dateUpdated": "2026-10-26T19:53:16.336Z"}}}, "cveMetadata": {"cveId": "CVE-2026-65627", "state": "PUBLISHED", "dateUpdated": "2026-11-02T21:25:56.908Z", "dateReserved": "2026-07-22T13:58:26.233Z", "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "datePublished": "2026-10-26T19:53:16.336Z", "assignerShortName": "EEF"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://repo.hex.pm", "cpes": ["cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["jose_jwe_zip", "jose_jwe", "'Elixir.JOSE.JWE'"], "packageName": "jose", "packageURL": "pkg:hex/jose", "product": "jose", "programFiles": ["src/jwe/jose_jwe_zip.erl", "src/jwe/jose_jwe.erl", "lib/jose/jwe.ex"], "programRoutines": [{"name": "jose_jwe_zip:uncompress/2"}, {"name": "jose_jwe:block_decrypt/2"}, {"name": "'Elixir.JOSE.JWE':block_decrypt/2"}], "repo": "https://github.com/potatosalad/erlang-jose", "vendor": "potatosalad", "versions": [{"lessThan": "1.11.13", "status": "affected", "version": "1.0.0", "versionType": "semver"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["jose_jwe_zip", "jose_jwe", "'Elixir.JOSE.JWE'"], "packageName": "potatosalad/erlang-jose", "packageURL": "pkg:github/potatosalad/erlang-jose", "product": "jose", "programFiles": ["src/jwe/jose_jwe_zip.erl", "src/jwe/jose_jwe.erl", "lib/jose/jwe.ex"], "programRoutines": [{"name": "jose_jwe_zip:uncompress/2"}, {"name": "jose_jwe:block_decrypt/2"}, {"name": "'Elixir.JOSE.JWE':block_decrypt/2"}], "repo": "https://github.com/potatosalad/erlang-jose", "vendor": "potatosalad", "versions": [{"lessThan": "857eb8e7f2d33e2c9ca2189e77226561cacaf2ad", "status": "affected", "version": "a7746ecd4950f85a393136e449a91dac62b5c429", "versionType": "git"}]}], "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small crafted JWE token.\n\nThe jose_jwe_zip:uncompress/2 function in src/jwe/jose_jwe_zip.erl decompresses the DEFLATE-compressed plaintext of a JWE that carries the optional zip: DEF header by calling zlib:inflate/2 on the entire attacker-controlled stream, with no bound on the output size or the inflation ratio. Raw DEFLATE reaches ratios around 1000:1 on highly repetitive input, so a few-kilobyte token inflates to hundreds of megabytes or gigabytes in a single call.\n\nDecompression runs automatically during decryption through jose_jwe:block_decrypt/2 (JOSE.JWE.block_decrypt/2 in Elixir), before the recipient can inspect or reject the payload. With the common asymmetric key-management algorithms (RSA-OAEP, ECDH-ES) an attacker needs only the recipient's public key to craft such a token, so no authentication or secret material is required. A single small token can exhaust the node's memory and crash the BEAM, denying service to all users.\n\nThis issue affects jose: from 1.0.0 before 1.11.13."}], "id": "CVE-2026-65627", "lastModified": "2026-11-02T22:17:22.133", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-65627", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-02T21:25:06.662495Z", "version": "2.0.3"}}]}, "published": "2026-10-26T20:17:58.290", "references": [{"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://cna.erlef.org/cves/CVE-2026-65627.html"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://github.com/potatosalad/erlang-jose/commit/857eb8e7f2d33e2c9ca2189e77226561cacaf2ad"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://github.com/potatosalad/erlang-jose/commit/a7746ecd4950f85a393136e449a91dac62b5c429"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://github.com/potatosalad/erlang-jose/security/advisories/GHSA-wfpv-qxp8-x5gm"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://osv.dev/vulnerability/EEF-CVE-2026-65627"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/potatosalad/erlang-jose/security/advisories/GHSA-wfpv-qxp8-x5gm"}], "sourceIdentifier": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-409"}], "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "type": "Secondary"}]}

{"bugzilla": {"description": "jose: jose: Denial of Service via unbounded decompression of crafted JWE tokens", "id": "2561063", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2561063"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-409", "details": ["Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small crafted JWE token.\nThe jose_jwe_zip:uncompress/2 function in src/jwe/jose_jwe_zip.erl decompresses the DEFLATE-compressed plaintext of a JWE that carries the optional zip: DEF header by calling zlib:inflate/2 on the entire attacker-controlled stream, with no bound on the output size or the inflation ratio. Raw DEFLATE reaches ratios around 1000:1 on highly repetitive input, so a few-kilobyte token inflates to hundreds of megabytes or gigabytes in a single call.\nDecompression runs automatically during decryption through jose_jwe:block_decrypt/2 (JOSE.JWE.block_decrypt/2 in Elixir), before the recipient can inspect or reject the payload. With the common asymmetric key-management algorithms (RSA-OAEP, ECDH-ES) an attacker needs only the recipient's public key to craft such a token, so no authentication or secret material is required. A single small token can exhaust the node's memory and crash the BEAM, denying service to all users.\nThis issue affects jose: from 1.0.0 before 1.11.13.", "A flaw was found in jose. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service (DoS) through memory exhaustion. When processing JSON Web Encryption (JWE) tokens that use compression, the library decompresses the payload without enforcing limits on the output size or expansion ratio. An attacker can exploit this issue by sending a small, crafted token, causing the application to consume excessive memory and crash."], "mitigation": {"lang": "en:us", "value": "Reject JWE tokens carrying the \"zip\": \"DEF\" header at the application gateway or API perimeter before decryption routines are executed."}, "name": "CVE-2026-65627", "package_state": [{"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Affected", "package_name": "grafana12.4", "product_name": "Red Hat Hardened Images"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Affected", "package_name": "grafana13.1", "product_name": "Red Hat Hardened Images"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Affected", "package_name": "grafana13.2", "product_name": "Red Hat Hardened Images"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Will not fix", "package_name": "rabbitmq-server4.2", "product_name": "Red Hat Hardened Images"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Affected", "package_name": "rabbitmq-server4.3", "product_name": "Red Hat Hardened Images"}, {"cpe": "cpe:/a:redhat:openstack:17.1", "fix_state": "Affected", "package_name": "rabbitmq-server", "product_name": "Red Hat OpenStack Platform 17.1"}, {"cpe": "cpe:/a:redhat:openstack:18.0", "fix_state": "Affected", "package_name": "rabbitmq-server", "product_name": "Red Hat OpenStack Platform 18.0"}], "public_date": "2026-10-26T19:53:16Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-65627\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-65627\nhttps://cna.erlef.org/cves/CVE-2026-65627.html\nhttps://github.com/potatosalad/erlang-jose/commit/857eb8e7f2d33e2c9ca2189e77226561cacaf2ad\nhttps://github.com/potatosalad/erlang-jose/commit/a7746ecd4950f85a393136e449a91dac62b5c429\nhttps://github.com/potatosalad/erlang-jose/security/advisories/GHSA-wfpv-qxp8-x5gm\nhttps://osv.dev/vulnerability/EEF-CVE-2026-65627"], "statement": "A decompression bomb vulnerability was discovered in the Erlang and Elixir jose library when handling JSON Web Encryption (JWE) tokens with compression enabled (DEF). The library uncompresses ciphertext using zlib:inflate/2 without bounding the output size or inflation ratio. An unauthenticated remote attacker can exploit this flaw by submitting a small, highly compressed crafted JWE token, causing uncontrolled memory allocation that exhausts system resources and crashes the BEAM virtual machine, resulting in a denial of service.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.0.0,1.11.13)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "jose", "source": "cna", "vendor": "potatosalad"}, "product": "jose", "vendor": "potatosalad"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[a7746ecd4950f85a393136e449a91dac62b5c429,857eb8e7f2d33e2c9ca2189e77226561cacaf2ad)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "jose", "source": "cna", "vendor": "potatosalad"}, "product": "jose", "vendor": "potatosalad"}], "created": "2026-10-27T01:30:16.120547+00:00", "updated": "2026-10-27T03:00:08.267113+00:00", "vendors": ["potatosalad", "potatosalad$PRODUCT$jose"]}