{"answers":{"affected":"1 open source package ship an affected version, including jose.","exploited":"There is no known exploitation of CVE-2026-65629 in the wild and no public exploit code.","fix":"Upgrade jose to 1.11.13 or later.","what":"CVE-2026-65629 is a high-severity vulnerability in potatosalad jose, published on 26 Oct 2026."},"fix_prompt":"Check this codebase for CVE-2026-65629 and fix it if it is affected.\n\nWhat it is: CVE-2026-65629 is a high-severity vulnerability in potatosalad jose, published on 26 Oct 2026. \nExploitation: There is no known exploitation of CVE-2026-65629 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- jose (Hex): affected from 1.10.0; fixed in 1.11.13\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-65629/ (Markdown: https://insights.sbomify.com/CVE-2026-65629/index.md)","id":"CVE-2026-65629","markdown":"https://insights.sbomify.com/CVE-2026-65629/index.md","name":"CVE-2026-65629","record":{"aliases":["DEBIAN-CVE-2026-65629","EEF-CVE-2026-65629","GHSA-h4gx-8jq2-mfhc","UBUNTU-CVE-2026-65629"],"analysis":null,"analysis_generated_by":null,"assigner":"EEF","cpe":[],"cvss":{"score":7.4,"severity":"high","source":"cna","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0"},"cwes":[{"id":"CWE-916","name":"Use of Password Hash With Insufficient Computational Effort"}],"description":"Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a password-encrypted private-key export to recover the private key through an offline password-cracking attack.\n\nWhen jose exports a password-encrypted private key with jose_jwk:to_der/2 (JOSE.JWK.to_der/2), the jose_jwk_der:to_binary/3 function in src/jwk/jose_jwk_der.erl serializes the key as a PKCS#8 EncryptedPrivateKeyInfo using the PBES2 scheme with hardcoded key-derivation parameters: PBKDF2-HMAC-SHA256 with an iteration count of 2048 and an 8-byte (64-bit) random salt. Neither value can be overridden by the caller.\n\nBoth values are far below current guidance (OWASP recommends on the order of 600,000 iterations for PBKDF2-HMAC-SHA256, and NIST recommends salts of at least 128 bits), so the key-stretching work factor is roughly 300 times lower than intended and the short salt reduces the cost of precomputation across keys. The symmetric encryption (AES-256-CBC with a 16-byte random IV) is not affected; the weakness is entirely in the derivation strength. An attacker who obtains one of these exported blobs (for example from a backup, configuration repository, object storage, or logs) can mount a cheap offline dictionary or brute-force attack against the export password, and success yields the full private key.\n\nThis issue affects jose: from 1.10.0 before 1.11.13.","ecosystems":["Hex"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Weak PBKDF2 parameters for password-encrypted private-key export in jose","id":"CVE-2026-65629","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"Hex","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":5,"next":{"headline":"Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose","id":"CVE-2026-65630"},"packages":[{"ecosystem":"Hex","fixed":["1.11.13"],"introduced":["1.10.0"],"last_affected":[],"package":"jose","purl":"pkg:hex/jose","source":"EEF-CVE-2026-65629"}],"prev":{"headline":"Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types","id":"CVE-2026-65628"},"products":["jose"],"published":"2026-10-26","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"Erlang Ecosystem Foundation","prefix":"EEF"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2026-10-26","vendors":["potatosalad"]},"summary":null,"url":"https://insights.sbomify.com/CVE-2026-65629/"}