JS
Product
Jsrsasign
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 3Medium 2Low 0
Watch
Add Jsrsasign to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21484 | 5.9 | Jan 22 | Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process Affected: before 11.0.0 |
| CVE-2026-4603 | 5.3 | Mar 23 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigInteger.modPowInt… Affected: before 11.1.1 |
Showing 2