Skip to content
Potatosalad vulnerabilities
Newest
-
appsup-dart jose
Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose
CVE-2026-65630
Fix available
5.9 Medium
-
appsup-dart jose
ECDSA signature length is not validated in jose, allowing signature malleability
CVE-2026-65632
Fix available
5.1 Medium
-
appsup-dart jose
erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service
CVE-2026-65631
Fix available
6.9 Medium
-
appsup-dart jose
Weak PBKDF2 parameters for password-encrypted private-key export in jose
CVE-2026-65629
Fix available
7.4 High
-
appsup-dart jose
Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types
CVE-2026-65628
Fix available
5.9 Medium
-
appsup-dart jose
Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2
CVE-2026-65627
Fix available
6.9 Medium
-
appsup-dart jose
Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose
CVE-2026-65626
Fix available
5.9 Medium
-
appsup-dart jose
Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose
CVE-2026-65625
Fix available
5.9 Medium
-
potatosalad erlang-jose
erlang-jose vulnerable to denial of service via large p2c value
CVE-2023-50966
Fix available
5.3 Medium