CVE-2026-62374

Name of the Vulnerable Software and Affected Versions @sd-jwt/core versions prior to 0.20.0 @sd-jwt/decode versions prior to 0.20.0

Description In the @sd-jwt/decode component, also utilized by @sd-jwt/core, the system silently drops tampered Disclosures if their digest does not match the Issuer-signed sd array. Instead of rejecting the input, it returns a reduced claim set and reports success as long as the Issuer signature remains valid. This behavior occurs when a Disclosure is tampered with while remaining valid JSON or contains invalid UTF-8 bytes. In the case of invalid UTF-8, the TextDecoder / Buffer decoding path replaces characters with U+FFFD, resulting in syntactically valid data. This allows a malicious holder to exploit an omission primitive via SDJwtInstance.verify() during key binding, or an on-path attacker to tamper with Disclosures when key binding is not enforced. If a relying party allows access when specific restriction, role, or age claims are missing, this silent reduction can lead to unauthorized authorization decisions.

Recommendations Update @sd-jwt/core to version 0.20.0. At the moment, there is no information about a newer version that contains a fix for this vulnerability for the standalone @sd-jwt/decode package.