org.webjars.npm:jsrsasign vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

OR

Product

org.webjars.npm:jsrsasign

by · last CVE Mar 23, 2026

5

CVEs

0

On KEV

9.1

Max CVSS

0

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 3High 2Medium 0Low 0

Severity

All severities5 Critical3 High2 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add org.webjars.npm:jsrsasign to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-4601	9.1	0%	Mar 23	Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation Affected: 0
CVE-2026-4599	9.1	0%	Mar 23	Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and… Affected: 8.0.12
CVE-2026-4600	9.1	0%	Mar 23	Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in… Affected: 0
CVE-2026-4598	7.5	1%	Mar 23	Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation… Affected: 0
CVE-2026-4602	7.5	0%	Mar 23	Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js Affected: 0