CVE-2026-85473

CVE-2026-85473 · Out-of-Range Timestamp Claim Handling in auth0/java-jwt

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affected service.

CVSS 5.3 · Moyenne · EPSS 0,3% · Correctif disponible

Publication: 2026-10-13T20:08:56.332Z
Mise à jour: 2026-10-16T15:31:55.100Z

Produits et versions concernés

java-jwt
Versions du logiciel
- ≥ 4.0.0, < 4.6.2: Concernée (semver)
Mettez à jour vers 4.6.2

Sources originales

https://trust.okta.com/security-advisories/out-of-range-timestamp-claim-handling-in-auth0-java-jwt-cve-2026-85473
https://github.com/auth0/java-jwt/security/advisories/GHSA-cg7w-5cc2-f2xm
https://nvd.nist.gov/vuln/detail/CVE-2026-85473

Vérifiez votre serveur →