JS
Product
Jsrsasign
by Kjur · last CVE Mar 23, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 3Medium 2Low 0
Watch

Add Jsrsasign to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4598
7.5
1%
Mar 23
Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation…
Affected: before 11.1.1
CVE-2026-4602
7.5
0%
Mar 23
Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js
Affected: before 11.1.1
CVE-2020-14966
7.5
1%
Jun 22
An issue was discovered in the jsrsasign package through 8.0.18 for Node.js
Affected: through 8.0.18
Showing 3