Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-65627— Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2

Quick assessment

Affected
potatosalad jose
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 （即 ）库中存在一个“高度压缩数据处理不当（数据放大）”的漏洞。该漏洞允许远程攻击者通过构造一个极小的 JWE（JSON Web Encryption）令牌，耗尽目标节点的内存资源。 具体而言，位于 文件中的 函数，在处理带有可选 头的 JWE 时，会调用 对攻击者完全控制的 DEFLATE 压缩明文流进行解压缩。该函数未对输出大小或膨胀比率设置任何上限。由于原始 DEFLATE 算法在处理高度重复的输入数据时，膨胀比率可高达约 1000:1，因此仅几个千字节大小的令牌，在一次调用中就可能膨胀至数百兆字节甚至数

CVSS 6.9 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-65627

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2
Source: CVE Program / CVE List V5
Vulnerability Description
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small crafted JWE token. The jose_jwe_zip:uncompress/2 function in src/jwe/jose_jwe_zip.erl decompresses the DEFLATE-compressed plaintext of a JWE that carries the optional zip: DEF header by calling zlib:inflate/2 on the entire attacker-controlled stream, with no bound on the output size or the inflation ratio. Raw DEFLATE reaches ratios around 1000:1 on highly repetitive input, so a few-kilobyte token inflates to hundreds of megabytes or gigabytes in a single call. Decompression runs automatically during decryption through jose_jwe:block_decrypt/2 (JOSE.JWE.block_decrypt/2 in Elixir), before the recipient can inspect or reject the payload. With the common asymmetric key-management algorithms (RSA-OAEP, ECDH-ES) an attacker needs only the recipient's public key to craft such a token, so no authentication or secret material is required. A single small token can exhaust the node's memory and crash the BEAM, denying service to all users. This issue affects jose: from 1.0.0 before 1.11.13.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
对高度压缩数据的处理不恰当(数据放大攻击)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
potatosalad jose 1.0.0 ~ 1.11.13 cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*
potatosalad jose a7746ecd4950f85a393136e449a91dac62b5c429 ~ 857eb8e7f2d33e2c9ca2189e77226561cacaf2ad cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-65627

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-65627

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-65627 (1)

Vendor Advisories for CVE-2026-65627 (2)

Other References for CVE-2026-65627 (1)

Same Patch Batch · potatosalad · 2026-10-26 · 8 CVEs total

CVE-2026-65629 7.4 HIGH Weak PBKDF2 parameters for password-encrypted private-key export in jose
CVE-2026-65631 6.9 MEDIUM erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CP
CVE-2026-65626 5.9 MEDIUM Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose
CVE-2026-65628 5.9 MEDIUM Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key t
CVE-2026-65625 5.9 MEDIUM Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose
CVE-2026-65630 5.9 MEDIUM Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in j
CVE-2026-65632 5.1 MEDIUM ECDSA signature length is not validated in jose, allowing signature malleability

IV. Related Vulnerabilities

Same product: jose
Same vendor: potatosalad
Same weakness: CWE-409