CVE-2026-65627

Name of the Vulnerable Software and Affected Versions potatosalad jose versions 1.0.0 through 1.11.12

Description An improper handling of highly compressed data, known as data amplification, allows a remote attacker to exhaust a node's memory using a small crafted JWE token. The jose jwe zip:uncompress/2 function in src/jwe/jose jwe zip.erl decompresses DEFLATE-compressed plaintext of a JWE containing the zip: DEF header by calling zlib:inflate/2 on the attacker-controlled stream without bounds on output size or inflation ratio. This can cause a few-kilobyte token to inflate into hundreds of megabytes or gigabytes. Decompression occurs automatically during decryption via jose jwe:block decrypt/2 (or JOSE.JWE.block decrypt/2 in Elixir) before the payload is inspected. Using asymmetric key-management algorithms like RSA-OAEP or ECDH-ES, an attacker only needs the recipient's public key to craft the token, requiring no authentication. This can crash the BEAM and cause a denial of service.

Recommendations Update potatosalad jose to version 1.11.13 or later. As a temporary workaround, reject JWE tokens that carry a zip header before passing them to the jose jwe:block decrypt/2 function.