Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-65628— Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types

Quick assessment

Affected
potatosalad jose
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

（在 Elixir 中暴露为 ）用于从两个 JWK 对象派生出 ECDH 共享密钥。该函数的第一个子句仅当两个 JWK 具有相同的密钥类型（ ）时才会匹配；而其兜底子句会递归调用自身，形式为 。由于 会原样返回已解析的 记录，因此若传入的两个 JWK 密钥类型不同（例如一个为 EC 密钥，另一个为 RSA 密钥），兜底子句将以相同的参数再次进入，从而引发无界的尾递归循环。该循环既不会返回，也不会触发崩溃。 若某个应用程序在从外部提供的对等方公钥派生共享密钥时，未先验证对等方密钥的类型和曲线是否与自身密钥匹配，则攻击

CVSS 5.9 · Medium

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-65628

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types
Source: CVE Program / CVE List V5
Vulnerability Description
jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKs. Its first function clause only matches when both JWKs carry the same key type (kty) module, and its fallback clause re-invokes itself as shared_secret(from(YourJWK), from(MyJWK)). Because from/1 returns an already-parsed jose_jwk record unchanged, passing two JWKs whose key types differ (for example an EC key and an RSA key) makes the fallback clause re-enter with identical arguments, producing an unbounded tail-recursive loop that never returns and never crashes. An application that derives a shared secret from an externally supplied peer public key without first checking that the peer key's type and curve match its own key can be driven into this loop by an attacker-controlled JWK, pinning an Erlang scheduler at 100% CPU. Repeated requests exhaust the available schedulers, resulting in a denial of service. This issue affects jose: from 1.5.0 before 1.11.13.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
未经控制的递归
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
potatosalad jose 1.5.0 ~ 1.11.13 cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*
potatosalad jose 7b80b9f55b9898e1a6901ce136061b241b021d7c ~ 26182a7de63b91550035d3f08741f7d17f1f675a cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-65628

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-65628

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-65628 (1)

Vendor Advisories for CVE-2026-65628 (3)

Other References for CVE-2026-65628 (1)

Same Patch Batch · potatosalad · 2026-10-26 · 8 CVEs total

CVE-2026-65629 7.4 HIGH Weak PBKDF2 parameters for password-encrypted private-key export in jose
CVE-2026-65627 6.9 MEDIUM Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2
CVE-2026-65631 6.9 MEDIUM erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CP
CVE-2026-65626 5.9 MEDIUM Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose
CVE-2026-65625 5.9 MEDIUM Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose
CVE-2026-65630 5.9 MEDIUM Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in j
CVE-2026-65632 5.1 MEDIUM ECDSA signature length is not validated in jose, allowing signature malleability

IV. Related Vulnerabilities

Same product: jose
Same vendor: potatosalad
Same weakness: CWE-674