CVE-2026-65631

The erlang-jose library (versions 1.7.7 before 1.11.13 ) is vulnerable to a CPU-exhaustion denial of service due to inefficient algorithmic complexity. When parsing untrusted JWKs via jose_jwk:from_binary/1 or jose_jwk:from_map/1 (including Elixir wrappers), the application may attempt to recover...