Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-65631— erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service

Quick assessment

Affected
potatosalad jose
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

erlang-jose 库中存在算法复杂度低效的漏洞，使得未认证的远程攻击者能够通过提交精心构造的 RSA JSON Web Key（JWK）来引发 CPU 耗尽型拒绝服务（DoS）攻击。 当应用程序通过 jose_jwk:from_binary/1 或 jose_jwk:from_map/1 公共 API（或其 Elixir 封装 JOSE.JWK.from_binary/1 和 JOSE.JWK.from_map/1）解析不可信的 JWK 时，若提供的 RSA 私钥包含 d、e 和 n 参数，但缺失所有中国剩余

CVSS 6.9 · Medium

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-65631

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service
Source: CVE Program / CVE List V5
Vulnerability Description
Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion denial of service by submitting a crafted RSA JSON Web Key. When an application parses an untrusted JWK through the public jose_jwk:from_binary/1 or jose_jwk:from_map/1 API (or the Elixir wrappers JOSE.JWK.from_binary/1 and JOSE.JWK.from_map/1), an RSA private key that supplies d, e, and n but omits all Chinese Remainder Theorem parameters (p, q, dp, dq, qi) is routed into convert_sfm_to_crt/1, which tries to recover the missing primes by factoring the modulus. The three integers are read straight from the base64url input and are never validated as a real RSA key. When the modulus cannot be split into two factors (for example, when it is itself prime), the search loop convert_sfm_to_crt_find_p/6 performs a modular exponentiation over the attacker-sized modulus on every iteration and never succeeds. A single request of a few hundred bytes forces close to one CPU-second of work before an internal one-second watchdog kills the worker, and a larger modulus raises the cost further. By flooding such requests an attacker can saturate every scheduler and deny service, without credentials, a valid RSA key, or any special configuration. This issue affects jose: from 1.7.7 before 1.11.13.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
算法复杂性
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
potatosalad jose 1.7.7 ~ 1.11.13 cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*
potatosalad jose d19e1ba68d88c68d29aa942be2573a22dbafca1f ~ bfd336c0062bff93e65d08c22361897e96afd956 cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-65631

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-65631

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-65631 (1)

Vendor Advisories for CVE-2026-65631 (2)

Other References for CVE-2026-65631 (1)

Same Patch Batch · potatosalad · 2026-10-26 · 8 CVEs total

CVE-2026-65629 7.4 HIGH Weak PBKDF2 parameters for password-encrypted private-key export in jose
CVE-2026-65627 6.9 MEDIUM Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2
CVE-2026-65626 5.9 MEDIUM Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose
CVE-2026-65628 5.9 MEDIUM Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key t
CVE-2026-65625 5.9 MEDIUM Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose
CVE-2026-65630 5.9 MEDIUM Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in j
CVE-2026-65632 5.1 MEDIUM ECDSA signature length is not validated in jose, allowing signature malleability

IV. Related Vulnerabilities

Same product: jose
Same vendor: potatosalad
Same weakness: CWE-407