org.webjars.npm:jsrsasign vulnerabilities | LiveThreat CVE Feed

Product

org.webjars.npm:jsrsasign

by · last CVE Mar 23, 2026

CVEs

On KEV

9.1

Max CVSS

New 30D

Severity mix

Critical 3High 2Medium 0Low 0

Severity

Exploitation

Watch

Add org.webjars.npm:jsrsasign to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-4598	7.5	1%	Mar 23	Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation… Affected: 0
CVE-2026-4602	7.5	0%	Mar 23	Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js Affected: 0