CVE-2026-65625

The jose library (versions 1.2.0 to before 1.11.13) contains a vulnerability in its pure-Erlang AES-GCM fallback. The jose_jwa_aes component fails to validate the length of the attacker-supplied authentication tag, leading to a tag forgery and integrity bypass . By truncating the tag to as little...

EEF-CVE-2026-65625 Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose

Summary The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in...