Lucene search
+L

1 matches found

osv_eef
osv_eef
•added 2026/10/26 7:53 p.m.•7 views

EEF-CVE-2026-65628 Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types

Summary josejwk:sharedsecret/2 exposed in Elixir as JOSE.JWK.sharedsecret/2 derives an ECDH shared secret from two JWKs. Its first function clause only matches when both JWKs carry the same key type kty module, and its fallback clause re-invokes itself as sharedsecretfromYourJWK, fromMyJWK. Becau...

5.9CVSS5.8AI score0.00136EPSS
SaveExploits0References5
Rows per page
Query Builder