JS
Product
jsrsasign
by · last CVE Mar 23, 2026
6
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 0
Watch

Add jsrsasign to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4598
7.5
1%
Mar 23
Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation…
Affected: before 11.1.1
CVE-2026-4602
7.5
0%
Mar 23
Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js
Affected: before 11.1.1
Showing 2