CVE-2026-65629: Weak PBKDF2 parameters for password-encrypted private-key export in jose
CVE-2026-65629 is a vulnerability in Weak PBKDF2 parameters for password-encrypted private-key export in jose, rated Moderate by Microsoft. Microsoft has not reported exploitation in the wild. The EPSS model estimates a 0.06% probability of exploitation activity in the next 30 days, higher than 0% of all scored vulnerabilities. Microsoft released the fix on 31 October 2026, outside Patch Tuesday. It affects 1 product in 1 product family (Open Source Software).