CVE-2026-85473

MEDIUM Status: Received

CVSS Scores

CVSS v3.x Base Score
5.3
MEDIUM

Description

The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affected service.

Published
October 13, 2026 9:19 PM
Last Modified
October 13, 2026 9:19 PM
Source
[email protected]

Weaknesses (CWE)

CWE-20 CWE-755

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry