Beveiligingsadvies

CVE-2026-4598

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-23 05:00:11

Laatst bijgewerkt 2026-09-10 12:04:56

Toegewezen door snyk

CVSS-score 8.7

Status PUBLISHED

Beschrijving

Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such crafted values (e.g., modInverse(0, m) or modInverse(-1, m)).

← Alle CVE's bekijken Bekijk op cve.org ↗