KJ
Vendor
Kjur
12
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-4603 | JS Jsrsasign Kjur | 5.3 | Mar 23 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigInteger.modPowInt… |
| CVE-2026-4601 | JS Jsrsasign Kjur | 9.1 | Mar 23 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation |
| CVE-2026-4599 | JS Jsrsasign Kjur | 9.1 | Mar 23 | Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and… |
| CVE-2026-4598 | JS Jsrsasign Kjur | 7.5 | Mar 23 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation… |
| CVE-2026-4602 | JS Jsrsasign Kjur | 7.5 | Mar 23 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js |
| CVE-2026-4600 | JS Jsrsasign Kjur | 9.1 | Mar 23 | Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in… |
| CVE-2024-21484 | JS Jsrsasign Kjur | 5.9 | Jan 22 | Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process |
| CVE-2022-25898 | JS Jsrsasign Kjur | 9.8 | Jul 1 | The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT signature with non Base64URL encoding special characters or… |
| CVE-2021-30246 | JS Jsrsasign Kjur | 9.1 | Apr 7 | In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized to be valid |
| CVE-2020-14968 | JS Jsrsasign Kjur | 9.8 | Jun 22 | An issue was discovered in the jsrsasign package before 8.0.17 for Node.js |
| CVE-2020-14967 | JS Jsrsasign Kjur | 9.8 | Jun 22 | An issue was discovered in the jsrsasign package before 8.0.18 for Node.js |
| CVE-2020-14966 | JS Jsrsasign Kjur | 7.5 | Jun 22 | An issue was discovered in the jsrsasign package through 8.0.18 for Node.js |