BaseFortify

Publication date: 2025-11-12

Last updated on: 2025-12-31

Assigner: MITRE

Description

An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-12

Last Modified

2025-12-31

Generated

2026-07-06

AI Q&A

2025-11-13

EPSS Evaluated

2026-07-05

NVD

CVE-2025-63811

Affected Vendors & Products

Vendor	Product	Version / Range
dvsekhvalnov	jose2go	From 1.5.0 (inc) to 1.7.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability exists in dvsekhvalnov jose2go versions 1.5.0 through 1.7.0, where an attacker can cause a Denial-of-Service (DoS) by sending a crafted JSON Web Encryption (JWE) token that has an exceptionally high compression ratio.

Impact Analysis

The impact of this vulnerability is that an attacker can cause a Denial-of-Service (DoS) condition, potentially making the affected service unavailable or unresponsive by exploiting the processing of specially crafted JWE tokens.

Hi! I’m here to help you understand CVE-2025-63811. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70