Threats affecting pkg:hex/erlang-jose

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.2%	CVE-2026-65631Microsoft · erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service Medium6.9EPSS 0.2%2026-10-31GCVE DatabaseCVE-2026-65631 The erlang-jose library version 3.0 contains a vulnerability in RSA JWK parsing where it attempts to factor an attacker-controlled modulus. This behavior can lead to CPU exhaustion, resulting in a denial of service condition. EPSS 0.2%Report on CVE-2026-65631 Vulnerability Microsoft Security Response Center CWE-407 #microsoft-security-response-ce	GCVE Database	2026-10-31

Page 1 of 1