Lucene search
+L

1 matches found

osv_eef
osv_eef
•added 2026/10/26 7:53 p.m.•3 views

EEF-CVE-2026-65627 Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2

Summary Improper Handling of Highly Compressed Data Data Amplification vulnerability in potatosalad jose erlang-jose allows a remote attacker to exhaust a node's memory with a small crafted JWE token. The josejwezip:uncompress/2 function in src/jwe/josejwezip.erl decompresses the DEFLATE-compress...

6.9CVSS6AI score
SaveExploits0References5
Rows per page
Query Builder