MEDIUM 5.3 NVD
CVE-2026-85473
The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition oc
The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affected service.
References
- https://github.com/auth0/java-jwt/security/advisories/GHSA-cg7w-5cc2-f2xm
- https://trust.okta.com/security-advisories/out-of-range-timestamp-claim-handling-in-auth0-
This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-10-13 via NVD.
vulnfeed aggregates 14602 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.