CVE-2026-34240 (GCVE-0-2026-34240)
Vulnerability from cvelistv5 – Published: 2026-03-31 15:44 – Updated: 2026-04-01 14:03
VLAI
EPSS
VEX
Title
jose vulnerable to untrusted JWK header key acceptance during signature verification
Summary
JOSE is a Javascript Object Signing and Encryption (JOSE) library. Prior to version 0.3.5+1, a vulnerability in jose could allow an unauthenticated, remote attacker to forge valid JWS/JWT tokens by using a key embedded in the JOSE header (jwk). The vulnerability exists because key selection could treat header-provided jwk as a verification candidate even when that key was not present in the trusted key store. Since JOSE headers are untrusted input, an attacker could exploit this by creating a token payload, embedding an attacker-controlled public key in the header, and signing with the matching private key. Applications using affected versions for token verification are impacted. This issue has been patched in version 0.3.5+1. A workaround for this issue involves rejecting tokens where header jwk is present unless that jwk matches a key already present in the application's trusted key store.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-347 - Improper Verification of Cryptographic Signature
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/appsup-dart/jose/security/advi… | x_refsource_CONFIRM |
| https://github.com/appsup-dart/jose/commit/b07799… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| appsup-dart | jose |
Affected:
< 0.3.5+1
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-34240",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-01T14:02:31.709988Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-01T14:03:14.969Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "jose",
"vendor": "appsup-dart",
"versions": [
{
"status": "affected",
"version": "\u003c 0.3.5+1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "JOSE is a Javascript Object Signing and Encryption (JOSE) library. Prior to version 0.3.5+1, a vulnerability in jose could allow an unauthenticated, remote attacker to forge valid JWS/JWT tokens by using a key embedded in the JOSE header (jwk). The vulnerability exists because key selection could treat header-provided jwk as a verification candidate even when that key was not present in the trusted key store. Since JOSE headers are untrusted input, an attacker could exploit this by creating a token payload, embedding an attacker-controlled public key in the header, and signing with the matching private key. Applications using affected versions for token verification are impacted. This issue has been patched in version 0.3.5+1. A workaround for this issue involves rejecting tokens where header jwk is present unless that jwk matches a key already present in the application\u0027s trusted key store."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-347",
"description": "CWE-347: Improper Verification of Cryptographic Signature",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-31T15:44:23.578Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/appsup-dart/jose/security/advisories/GHSA-vm9r-h74p-hg97",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/appsup-dart/jose/security/advisories/GHSA-vm9r-h74p-hg97"
},
{
"name": "https://github.com/appsup-dart/jose/commit/b07799aac1f56a9a21483feac026272aab30cc5d",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/appsup-dart/jose/commit/b07799aac1f56a9a21483feac026272aab30cc5d"
}
],
"source": {
"advisory": "GHSA-vm9r-h74p-hg97",
"discovery": "UNKNOWN"
},
"title": "jose vulnerable to untrusted JWK header key acceptance during signature verification"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-34240",
"datePublished": "2026-03-31T15:44:23.578Z",
"dateReserved": "2026-03-26T16:22:29.034Z",
"dateUpdated": "2026-04-01T14:03:14.969Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-34240",
"date": "2026-07-29",
"epss": "0.0013",
"percentile": "0.03007"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-34240\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-03-31T16:16:33.090\",\"lastModified\":\"2026-07-24T20:10:00.147\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"JOSE is a Javascript Object Signing and Encryption (JOSE) library. Prior to version 0.3.5+1, a vulnerability in jose could allow an unauthenticated, remote attacker to forge valid JWS/JWT tokens by using a key embedded in the JOSE header (jwk). The vulnerability exists because key selection could treat header-provided jwk as a verification candidate even when that key was not present in the trusted key store. Since JOSE headers are untrusted input, an attacker could exploit this by creating a token payload, embedding an attacker-controlled public key in the header, and signing with the matching private key. Applications using affected versions for token verification are impacted. This issue has been patched in version 0.3.5+1. A workaround for this issue involves rejecting tokens where header jwk is present unless that jwk matches a key already present in the application\u0027s trusted key store.\"},{\"lang\":\"es\",\"value\":\"JOSE es una biblioteca de Javascript Object Signing and Encryption (JOSE). Antes de la versi\u00f3n 0.3.5+1, una vulnerabilidad en jose podr\u00eda permitir a un atacante remoto no autenticado falsificar tokens JWS/JWT v\u00e1lidos utilizando una clave incrustada en el encabezado JOSE (jwk). La vulnerabilidad existe porque la selecci\u00f3n de claves podr\u00eda tratar el jwk proporcionado en el encabezado como un candidato de verificaci\u00f3n incluso cuando esa clave no estaba presente en el almac\u00e9n de claves de confianza. Dado que los encabezados JOSE son entrada no confiable, un atacante podr\u00eda explotar esto creando una carga \u00fatil de token, incrustando una clave p\u00fablica controlada por el atacante en el encabezado y firmando con la clave privada correspondiente. Las aplicaciones que utilizan versiones afectadas para la verificaci\u00f3n de tokens se ven afectadas. Este problema ha sido parcheado en la versi\u00f3n 0.3.5+1. Una soluci\u00f3n alternativa para este problema implica rechazar los tokens donde el jwk del encabezado est\u00e1 presente a menos que ese jwk coincida con una clave ya presente en el almac\u00e9n de claves de confianza de la aplicaci\u00f3n.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"appsup-dart\",\"product\":\"jose\",\"versions\":[{\"version\":\"\u003c 0.3.5+1\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-01T14:02:31.709988Z\",\"id\":\"CVE-2026-34240\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-347\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:appsup-dart:jose:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.3.5\\\\+1\",\"matchCriteriaId\":\"900F124C-8D70-47CF-BE74-3D47A796AB50\"}]}]}],\"references\":[{\"url\":\"https://github.com/appsup-dart/jose/commit/b07799aac1f56a9a21483feac026272aab30cc5d\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/appsup-dart/jose/security/advisories/GHSA-vm9r-h74p-hg97\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
"redhat_vex": {
"current_release_date": "2026-04-02T16:56:39+00:00",
"cve": "CVE-2026-34240",
"id": "CVE-2026-34240",
"initial_release_date": "2026-01-01T00:00:00+00:00",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "jose vulnerable to untrusted JWK header key acceptance during signature verification",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34240.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"cna\": {\"title\": \"jose vulnerable to untrusted JWK header key acceptance during signature verification\", \"source\": {\"advisory\": \"GHSA-vm9r-h74p-hg97\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"appsup-dart\", \"product\": \"jose\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 0.3.5+1\"}]}], \"references\": [{\"url\": \"https://github.com/appsup-dart/jose/security/advisories/GHSA-vm9r-h74p-hg97\", \"name\": \"https://github.com/appsup-dart/jose/security/advisories/GHSA-vm9r-h74p-hg97\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/appsup-dart/jose/commit/b07799aac1f56a9a21483feac026272aab30cc5d\", \"name\": \"https://github.com/appsup-dart/jose/commit/b07799aac1f56a9a21483feac026272aab30cc5d\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"JOSE is a Javascript Object Signing and Encryption (JOSE) library. Prior to version 0.3.5+1, a vulnerability in jose could allow an unauthenticated, remote attacker to forge valid JWS/JWT tokens by using a key embedded in the JOSE header (jwk). The vulnerability exists because key selection could treat header-provided jwk as a verification candidate even when that key was not present in the trusted key store. Since JOSE headers are untrusted input, an attacker could exploit this by creating a token payload, embedding an attacker-controlled public key in the header, and signing with the matching private key. Applications using affected versions for token verification are impacted. This issue has been patched in version 0.3.5+1. A workaround for this issue involves rejecting tokens where header jwk is present unless that jwk matches a key already present in the application\u0027s trusted key store.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-347\", \"description\": \"CWE-347: Improper Verification of Cryptographic Signature\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-03-31T15:44:23.578Z\"}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-34240\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-01T14:02:31.709988Z\"}}}], \"providerMetadata\": {\"shortName\": \"CISA-ADP\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"dateUpdated\": \"2026-04-01T14:03:10.575Z\"}}]}",
"cveMetadata": "{\"cveId\": \"CVE-2026-34240\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-31T15:44:23.578Z\", \"dateReserved\": \"2026-03-26T16:22:29.034Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-03-31T15:44:23.578Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…