Medium severity5.3NVD Advisory· Published Oct 13, 2026
CVE-2026-85473
CVE-2026-85473
Description
The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affected service.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.