CVE-2026-85473

5.3 Moyenne

Publiée le 13/10/2026 à 23:19 · Modifiée le 16/10/2026 à 18:22 · En attente d'analyse NVD · Source : psirt@okta.com

Description

The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affected service.

Traduire en français

Produits concernés

Auth0 java-jwt

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	psirt@okta.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L`

Faiblesses (CWE)

CWE-20
CWE-755

Références

https://github.com/auth0/java-jwt/security/advisories/GHSA-cg7w-5cc2-f2xm
https://trust.okta.com/security-advisories/out-of-range-timestamp-claim-handling-in-auth0-java-jwt-cve-2026-85473

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories