CVE-2026-4602 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js.…
High CVSS: 7.7

CVE-2026-4602

Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js. An attacker can force the computation of incorrect modular inverses and break signature verification by calling modPow with a negative exponent.
Vendor
Jsrsasign Project
Product
Jsrsasign
CWE
CWE-681
Yayın Tarihi
2026-03-23 06:16:22
Güncelleme
2026-03-23 16:08:58
Source Identifier
report@snyk.io
KEV Date Added
-

Kategoriler

CWE-681 Jsrsasign HIGH Jsrsasign Project 2026

Referanslar

https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5 https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195 https://github.com/kjur/jsrsasign/pull/650 https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175