Read the docs
TI-2026-80574 Aliases CVE-2026-65627

Decompression bomb in potatosalad jose exhausts memory via JWE tokens

Priority MEDIUM 64CWE-409Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 1 fixed, 1 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat.

Summary

The potatosalad jose library from 1.0.0 before 1.11.13 decompresses JWE tokens that carry the zip DEF header with no limit on output size or inflation ratio. Decompression runs automatically during decryption, so a remote attacker who needs only the recipient's public key for RSA-OAEP or ECDH-ES can send a small crafted token that exhausts node memory and crashes the BEAM. This is improper handling of highly compressed data (CWE-409).

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small crafted JWE token. The jose_jwe_zip:uncompress/2 function in src/jwe/jose_jwe_zip.erl decompresses the DEFLATE-compressed plaintext of a JWE that carries the optional zip: DEF header by calling zlib:inflate/2 on the entire attacker-controlled stream, with no bound on the output size or the inflation ratio. Raw DEFLATE reaches ratios around 1000:1 on highly repetitive input, so a few-kilobyte token inflates to hundreds of megabytes or gigabytes in a single call. Decompression runs automatically during decryption through jose_jwe:block_decrypt/2 (JOSE.JWE.block_decrypt/2 in Elixir), before the recipient can inspect or reject the payload. With the common asymmetric key-management algorithms (RSA-OAEP, ECDH-ES) an attacker needs only the recipient's public key to craft such a token, so no authentication or secret material is required. A single small token can exhaust the node's memory and crash the BEAM, denying service to all users. This issue affects jose: from 1.0.0 before 1.11.13.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00249 16th percentileScored 2026-11-07
Fix Partial jose (potatosalad): 1.11.13Red Hat: 5 advisoriesRed Hat: 1 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
potatosaladjose1.0.0 to before 1.11.131.11.13Patch availableCNA
  • jose Vendorpotatosalad Affected 1.0.0 to before 1.11.13 Fixed in 1.11.13 Patch available CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*——potatosalad
  • cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:* Versions — — ·potatosalad

Remediation

Upgrade jose to version 1.11.13 or later. Red Hat fixed Hardened Images in RHSA-2026:86200, RHSA-2026:88537, RHSA-2026:88541, RHSA-2026:90388 and RHSA-2026:91476, but lists Red Hat Hardened Images as affected without a fix, with no fix planned.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

  • Fix · CNA jose (potatosalad) Fixed in 1.11.13

Red Hat 5 advisories

  • RHSA-2026:91476 Released 2026-10-27 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images rabbitmq-server4.3-4.3.7-0.2.hum1@aarch64, rabbitmq-server4.3-4.3.7-0.2.hum1@s390x, rabbitmq-server4.3-4.3.7-0.2.hum1@src +1
  • RHSA-2026:90388 Released 2026-10-26 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images grafana12.4-12.4.13-0.4.hum1@aarch64, grafana12.4-12.4.13-0.4.hum1@src, grafana12.4-12.4.13-0.4.hum1@x86_64
  • RHSA-2026:88541 Released 2026-10-23 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images grafana13.2-13.2.4-0.3.hum1@aarch64, grafana13.2-13.2.4-0.3.hum1@s390x, grafana13.2-13.2.4-0.3.hum1@src +1
Show 2 more Red Hat advisories
  • RHSA-2026:88537 Released 2026-10-23 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images grafana13.1-13.1.8-0.4.hum1@aarch64, grafana13.1-13.1.8-0.4.hum1@s390x, grafana13.1-13.1.8-0.4.hum1@src +1
  • RHSA-2026:86200 Released 2026-10-20 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images rabbitmq-server4.3-4.3.7-0.1.hum1@aarch64, rabbitmq-server4.3-4.3.7-0.1.hum1@s390x, rabbitmq-server4.3-4.3.7-0.1.hum1@src +1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    potatosalad jose 1.11.13

    8 records Highest priority Priority HIGH 1 HIGH, 5 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2026-80576 Weak key derivation in jose password-protected key exportPriority HIGH 68
    • TI-2026-80578 erlang-jose JWK parsing CPU exhaustion via attacker-chosen RSA modulusPriority MEDIUM 64
    • TI-2026-80577 Timing side channel in pure-Erlang X25519 leaks private keys in josePriority MEDIUM 60
    Show all 8 records →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Hardened ImagesAffectedNo fix planned: Will not fix
Red Hat Hardened ImagesFixed RHSA-2026:86200, RHSA-2026:88537, RHSA-2026:88541, RHSA-2026:90388, RHSA-2026:91476
Not affected: 2 products
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0

Timeline

  1. 2026-10-26 Threatist record created from CVE-2026-65627
  2. 2026-10-27 Priority changed: MEDIUM → LOW
  3. 2026-10-29 Affected versions changed · Red Hat
  4. 2026-10-29 CVSS score added · Red Hat
  5. 2026-10-29 Fix available: RHSA-2026:88537 · Red Hat
  6. 2026-10-29 Fix available: RHSA-2026:88541 · Red Hat
  7. 2026-10-29 Fix available: Red Hat Hardened Images · Red Hat
  8. 2026-10-30 Fix available: RHSA-2026:90388 · Red Hat
  9. 2026-10-30 Fix available: RHSA-2026:91476 · Red Hat
  10. 2026-10-30 Fix available: RHSA-2026:86200 · Red Hat
  11. 2026-10-30 Affected versions changed · Red Hat
  12. 2026-11-02 CISA SSVC decision points changed
  13. 2026-11-02 Priority changed: LOW → MEDIUM
  14. 2026-11-06 Affected versions changed · Red Hat

References

Patch 1

Advisory 1

Other 3

  • TI-2026-80576 Weak key derivation in jose password-protected key export CVSS 4.0HIGH 7.4
  • TI-2026-80578 erlang-jose JWK parsing CPU exhaustion via attacker-chosen RSA modulus CVSS 4.0MEDIUM 6.9
  • TI-2026-80577 Timing side channel in pure-Erlang X25519 leaks private keys in jose CVSS 4.0MEDIUM 5.9
  • TI-2026-80575 Unbounded recursion in jose JWK shared secret derivation causes DoS CVSS 4.0MEDIUM 5.9
  • TI-2026-80579 ECDSA signature length is not validated in jose, allowing signature malleability CVSS 4.0MEDIUM 5.1
  • TI-2026-80573 Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose CVSS 4.0MEDIUM 5.9
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences