Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-4598 2 Jsrsasign Project, Kjur 2 Jsrsasign, Jsrsasign 2026-06-25 7.5 High
Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such crafted values (e.g., modInverse(0, m) or modInverse(-1, m)).