Open Wallet Foundation CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Open Wallet Foundation CVE published 2026-11-02

CVE-2026-62374

A vulnerability in `@sd-jwt/decode` 0.19.0 allows tampered disclosures to be silently dropped instead of rejected, potentially leading to a reduced claim set being presented to the relying party. This issue arises when the library fails to properly validate the integrity of disclosures in SD-JWT presentations, allowing malicious or curious holders, or in-transit attackers, to exploit this weakness. The vu [truncated]