CVE-2026-65628

Name of the Vulnerable Software and Affected Versions jose versions 1.5.0 through 1.11.12

Description The jose jwk:shared secret/2 function (exposed in Elixir as JOSE.JWK.shared secret/2) is used to derive an ECDH shared secret from two JSON Web Keys (JWKs). A flaw exists where the function only matches when both JWKs have the same key type (kty) module. If the key types differ, such as an EC key and an RSA key, the fallback clause re-invokes the function with identical arguments, creating an unbounded tail-recursive loop. This loop consumes 100% of an Erlang scheduler's CPU. An attacker providing a specially crafted JWK can trigger this behavior, and repeated requests can exhaust all available schedulers, leading to a denial of service.

Recommendations Update to version 1.11.13 or later. As a temporary workaround, verify that the externally supplied peer key's kty and curve match your own key, and reject any key with a non-matching type before calling JOSE.JWK.shared secret/2.