Product by Potatosalad
Jose
8 known vulnerabilities in Jose (Potatosalad), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-65629 | Weak PBKDF2 parameters for password-encrypted private-key export in jose | — | |
| Medium | CVE-2026-65627 | Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2 | — | |
| Medium | CVE-2026-65631 | Potatosalad Jose: Inefficient Algorithmic Complexity | — | |
| Medium | CVE-2026-65630 | Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose | — | |
| Medium | CVE-2026-65628 | Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types | — | |
| Medium | CVE-2026-65625 | Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose | — | |
| Medium | CVE-2026-65626 | Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose | — | |
| Medium | CVE-2026-65632 | ECDSA signature length is not validated in jose, allowing signature malleability | — |