jsrsasign vulnerabilities (npm)
14 vulnerabilities.
-
jsrsasignnpm jsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output in RSA Operations 5.1 Medium -
jsrsasignnpm jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction 9.4 Critical -
jsrsasignnpm jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation 9.3 Critical -
jsrsasignnpm jsrsasign is vulnerable to DoS through Infinite Loop when processing zero or negative inputs 8.7 High -
jsrsasignnpm jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass 8.7 High -
jsrsasignnpm jsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter validation in KJUR.crypto.DSA.setPublic 9.1 Critical -
jsrsasignnpm Marvin Attack of RSA and RSAOAEP decryption in jsrsasign 7.5 High -
jsrsasignnpm Improper Verification of Cryptographic Signature 7.7 High -
jsrsasignnpm Signatures are mistakenly recognized to be valid in jsrsasign No score -
jsrsasignnpm RSA signature validation vulnerability on maleable encoded message in jsrsasign 9.1 Critical -
jsrsasignnpm ECDSA signature vulnerability of Minerva timing attack in jsrsasign 5.9 Medium -
jsrsasignnpm ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign 7.5 High -
jsrsasignnpm RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign 9.8 Critical -
jsrsasignnpm RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign 9.8 Critical