{"id":"CVE-2026-2739","aliases":["AZL-78290","CLSA-2026-1779065199","CLSA-2026-1779065201","CLSA-2026-1782176259","CLSA-2026-1782176267","CLSA-2026-1789159797","CLSA-2026-1790541906","CLSA-2026-1791282392","CLSA-2026-1792488566","CLSA-2026-1792508499","DEBIAN-CVE-2026-2739","EUVD-2026-8025","GHSA-378v-28hj-76wf","ROOT-APP-NPM-CVE-2026-2739","UBUNTU-CVE-2026-2739","openSUSE-SU-2026:11126-1"],"status":"published","title":"bn.js affected by an infinite loop","description":"This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00531,"percentile":0.45209,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2026-02-20T05:00:08Z","modified":"2026-10-28T02:30:41Z","fixes":[{"ecosystem":"npm","package":"bn.js","fixed_in":["4.12.3","5.2.3"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:npm","package":"bn.js","fixed_in":["4.12.2-tuxcare.1","5.2.2-tuxcare.1","4.11.8-tuxcare.1","4.12.0-tuxcare.2","4.11.6-tuxcare.1","4.11.9-tuxcare.1","5.2.1-tuxcare.1","5.2.0-tuxcare.1","2.0.4-tuxcare.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"node-bn.js","fixed_in":["5.2.3+~5.2.0-1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/bn.js","fixed_in":["4.12.2-root.io.1","4.11.9-root.io.1","4.12.2-root.io.2","4.11.9-root.io.2","4.12.1-root.io.1","5.2.1-root.io.1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"bn.js","fixed_in":["4.12.2-aikido.2","4.11.9-aikido.2","4.12.1-aikido.1","5.2.1-aikido.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.3"}]}]},{"source":"ghsa","ecosystem":"npm","package":"bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.2.3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"reaper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.1.1-22"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.12.2-tuxcare.0"},{"fixed":"4.12.2-tuxcare.1"}]}],"versions":["4.12.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.2-tuxcare.0"},{"fixed":"5.2.2-tuxcare.1"}]}],"versions":["5.2.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.8-tuxcare.0"},{"fixed":"4.11.8-tuxcare.1"}]}],"versions":["4.11.8"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.12.0-tuxcare.0"},{"fixed":"4.12.0-tuxcare.2"}]}],"versions":["4.12.0","4.12.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.6-tuxcare.0"},{"fixed":"4.11.6-tuxcare.1"}]}],"versions":["4.11.6"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.9-tuxcare.0"},{"fixed":"4.11.9-tuxcare.1"}]}],"versions":["4.11.9"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.1-tuxcare.0"},{"fixed":"5.2.1-tuxcare.1"}]}],"versions":["5.2.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0-tuxcare.0"},{"fixed":"5.2.0-tuxcare.1"}]}],"versions":["5.2.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.4-tuxcare.0"},{"fixed":"2.0.4-tuxcare.1"}]}],"versions":["2.0.4"]},{"source":"osv","ecosystem":"Debian:12","package":"node-bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1+~5.1.1-1","5.2.3+~5.2.0-1","5.2.5+~5.2.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"node-bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1+~5.1.1-1","5.2.3+~5.2.0-1","5.2.5+~5.2.0-1"]},{"source":"osv","ecosystem":"Debian:14","package":"node-bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3+~5.2.0-1"}]}],"versions":["5.2.1+~5.1.1-1"]},{"source":"osv","ecosystem":"npm","package":"bn.js","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.12.3"}]}]},{"source":"osv","ecosystem":"npm","package":"bn.js","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.2.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-root.io.1"},{"fixed":"4.11.9-root.io.1"},{"fixed":"4.12.2-root.io.2"},{"fixed":"4.11.9-root.io.2"},{"fixed":"4.12.1-root.io.1"},{"fixed":"5.2.1-root.io.1"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-aikido.2"},{"fixed":"4.11.9-aikido.2"},{"fixed":"4.12.1-aikido.1"},{"fixed":"5.2.1-aikido.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"node-bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.11.8-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"node-bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1","5.0.0-2","5.1.1-1","5.1.1-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"node-bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3-1","5.2.0-3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"node-bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1+~5.1.1-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"node-bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1+~5.1.1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"node-bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.3+~5.2.0-1","5.2.5+~5.2.0-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"node-bn.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1+~5.1.1-1","5.2.3+~5.2.0-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"velociraptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.4.git185.a5708584-2.1"}]}],"bundled":49}],"references":[{"url":"https://security.snyk.io/vuln/SNYK-JS-BNJS-15274301","tags":["web","report"]},{"url":"https://github.com/indutny/bn.js/issues/316","tags":["report","web"]},{"url":"https://github.com/indutny/bn.js/issues/186","tags":["report","web"]},{"url":"https://gist.github.com/Kr0emer/02370d18328c28b5dd7f9ac880d22a91","tags":["web","report"]},{"url":"https://github.com/indutny/bn.js/pull/317","tags":["fix","web","report"]},{"url":"https://github.com/indutny/bn.js/commit/33df26b5771e824f303a79ec6407409376baa64b","tags":["fix","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2739","tags":["web","advisory"]},{"url":"https://github.com/indutny/bn.js/releases/tag/v5.2.3","tags":["web"]},{"url":"https://github.com/indutny/bn.js/issues/316#issuecomment-3924217358","tags":["web"]},{"url":"https://github.com/advisories/GHSA-378v-28hj-76wf"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2739.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-2739","tags":["advisory"]},{"url":"https://github.com/indutny/bn.js","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2026-2739","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2739","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46598","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-2739","description":"This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.","status":"published","published":"2026-02-20T05:00:08.253Z","modified":"2026-02-20T15:03:53.743Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P","level":"medium","assessor":"cna"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T13:48:35.749498Z"}],"euvd":[{"id":"EUVD-2026-8025","description":"This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.","status":"published","published":"2026-02-20T05:00:08Z","modified":"2026-02-20T15:03:53Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium"}],"updated_at":"2026-11-02T19:48:37.056368Z"}],"ghsa":[{"id":"GHSA-378v-28hj-76wf","title":"bn.js affected by an infinite loop","description":"This affects versions of the package bn.js before 4.12.3 and 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.","status":"published","published":"2026-02-20T06:30:39Z","modified":"2026-02-24T14:45:54Z","cvss":[{"version":"4.0","score":5.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:39:26.881079Z"}],"nvd":[{"id":"CVE-2026-2739","description":"This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.","status":"published","published":"2026-02-20T05:17:53.033Z","modified":"2026-06-17T10:31:38.003Z","cvss":[{"version":"4.0","score":5.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:12:06.63895Z"}],"osv":[{"id":"CVE-2026-2739","description":"This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.","status":"published","published":"2026-02-20T05:00:08.253Z","modified":"2026-11-11T02:48:58.014300906Z","cvss":[{"version":"4.0","score":5.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-11T03:21:32.226287Z"},{"id":"DEBIAN-CVE-2026-2739","description":"This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.","status":"published","published":"2026-02-20T05:17:53.033Z","modified":"2026-10-01T03:03:01.638351246Z","cvss":[{"version":"4.0","score":5.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:45:53.877573Z"},{"id":"GHSA-378v-28hj-76wf","title":"bn.js affected by an infinite loop","description":"This affects versions of the package bn.js before 4.12.3 and 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.","status":"published","published":"2026-02-20T06:30:39Z","modified":"2026-09-10T03:50:33.815513385Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"4.0","score":5.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T15:46:35.406455Z"},{"id":"ROOT-APP-NPM-CVE-2026-2739","title":"CVE-2026-2739 in @rootio/bn.js - Patched by Root","description":"Root has patched CVE-2026-2739 in the @rootio/bn.js package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-06-26T11:13:20Z","modified":"2026-06-26T13:00:05.815128253Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:27.649662Z"},{"id":"UBUNTU-CVE-2026-2739","description":"This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.","status":"published","published":"2026-02-20T05:17:00Z","modified":"2026-10-17T12:58:07.628609097Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"4.0","score":5.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium"}],"updated_at":"2026-11-02T16:56:08.726452Z"},{"id":"AZL-78290","title":"CVE-2026-2739 affecting package reaper 3.1.1-22","description":"This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.","status":"published","published":"2026-02-20T05:17:53Z","modified":"2026-04-21T04:34:23.74662Z","updated_at":"2026-11-02T15:28:09.747541Z"},{"id":"CLSA-2026-1779065199","title":"TuxCare security update for bn.js (1 CVE)","description":"TuxCare rebuilt bn.js to address 1 CVE. Fixed in 4.12.2-tuxcare.1.","status":"published","published":"2026-08-04T14:52:32Z","modified":"2026-10-15T09:45:30.11515905Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1779065201","title":"TuxCare security update for bn.js (1 CVE)","description":"TuxCare rebuilt bn.js to address 1 CVE. Fixed in 5.2.2-tuxcare.1.","status":"published","published":"2026-08-04T14:52:32Z","modified":"2026-10-15T09:45:31.171532235Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1782176259","title":"TuxCare security update for bn.js (1 CVE)","description":"TuxCare rebuilt bn.js to address 1 CVE. Fixed in 4.11.8-tuxcare.1.","status":"published","published":"2026-08-04T14:52:39Z","modified":"2026-10-15T09:45:55.907082833Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782176267","title":"TuxCare security update for bn.js (1 CVE)","description":"TuxCare rebuilt bn.js to address 1 CVE. Fixed in 4.12.0-tuxcare.2.","status":"published","published":"2026-08-04T14:52:39Z","modified":"2026-10-15T09:45:56.505541767Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1789159797","title":"TuxCare security update for bn.js (1 CVE)","description":"TuxCare rebuilt bn.js to address 1 CVE. Fixed in 4.11.6-tuxcare.1.","status":"published","published":"2026-09-11T20:49:57Z","modified":"2026-10-15T09:48:03.860541133Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1790541906","title":"TuxCare security update for bn.js (1 CVE)","description":"TuxCare rebuilt bn.js to address 1 CVE. Fixed in 4.11.9-tuxcare.1.","status":"published","published":"2026-09-27T20:45:06Z","modified":"2026-10-15T09:47:38.227237254Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1791282392","title":"TuxCare security update for bn.js (1 CVE)","description":"TuxCare rebuilt bn.js to address 1 CVE. Fixed in 5.2.1-tuxcare.1.","status":"published","published":"2026-10-06T10:26:32Z","modified":"2026-10-15T09:47:35.541158961Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1792488566","title":"TuxCare security update for bn.js (1 CVE)","description":"TuxCare rebuilt bn.js to address 1 CVE. Fixed in 5.2.0-tuxcare.1.","status":"published","published":"2026-10-20T09:29:26Z","modified":"2026-10-20T13:45:11.474176079Z","updated_at":"2026-11-02T15:43:54.378946Z"},{"id":"CLSA-2026-1792508499","title":"TuxCare security update for bn.js (1 CVE)","description":"TuxCare rebuilt bn.js to address 1 CVE. Fixed in 2.0.4-tuxcare.1.","status":"published","published":"2026-10-20T15:01:39Z","modified":"2026-10-20T19:30:17.282012648Z","updated_at":"2026-11-02T15:43:54.378946Z"},{"id":"openSUSE-SU-2026:11126-1","title":"velociraptor-0.7.0.4.git185.a5708584-2.1 on GA media","description":"These are all security issues fixed in the velociraptor-0.7.0.4.git185.a5708584-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-25T00:00:00Z","modified":"2026-06-26T08:15:07.590096547Z","updated_at":"2026-11-02T16:58:38.95195Z"}]}}