CVE-2023-50966: Potatosalad Erlang-Jose

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header.

Affected products

• Potatosalad Erlang-Jose: before 1.11.6 (fixed in 1.11.6)

Published 2024-03-19. Last modified 2026-06-17.