Answer in brief
CVE-2026-65628 records a Medium severity (CVSS 5.9) vulnerability in Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types. The current sources do not mark it as known exploited. The current feed maps potatosalad/jose (generic), potatosalad/potatosalad/erlang-jose (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.9. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps potatosalad/jose (generic), potatosalad/potatosalad/erlang-jose (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| potatosalad/josegeneric | >=1.5.0 <1.11.13 | 1.11.13 |
| potatosalad/potatosalad/erlang-josegeneric | >=7b80b9f55b9898e1a6901ce136061b241b021d7c <26182a7de63b91550035d3f08741f7d17f1f675a | 26182a7de63b91550035d3f08741f7d17f1f675a |
Published upstream
Oct 26, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 26, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 26, 2026
jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKs. Its first function clause only matches when both JWKs carry the same key type (kty) module, and its fallback clause re-invokes itself as shared_secret(from(YourJWK), from(MyJWK)). Because from/1 returns an already-parsed jose_jwk record unchanged, passing two JWKs whose key types differ (for example an EC key and an RSA key) makes the fallback clause re-enter with identical arguments, producing an unbounded tail-recursive loop that never returns and never crashes. An application that derives a shared secret from an externally supplied peer public key without first checking that the peer key's type and curve match its own key can be driven into this loop by an attacker-controlled JWK, pinning an Erlang scheduler at 100% CPU. Repeated requests exhaust the available schedulers, resulting in a denial of service. This issue affects jose: from 1.5.0 before 1.11.13.
Quoted source text, attributed separately from HOL analysis.