Kjur vulnerabilities

Products

• Jsrsasign 12

Newest

• kjur jsrsasign jsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output in RSA Operations CVE-2026-4603 Fix available 5.1 MediumMarch 23, 2026
• kjur jsrsasign, red hat migration toolkit for virtualization 2.1, migration toolkit for virtualization 2.9 +5 more +7 more jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction CVE-2026-4601 Fix available 9.4 CriticalMarch 23, 2026
• kjur jsrsasign, red hat migration toolkit for virtualization 2.1, migration toolkit for virtualization 2.9 +5 more +7 more jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation CVE-2026-4599 Fix available 9.3 CriticalMarch 23, 2026
• kjur jsrsasign, red hat migration toolkit for virtualization 2.1, migration toolkit for virtualization 2.9 +5 more +7 more jsrsasign is vulnerable to DoS through Infinite Loop when processing zero or negative inputs CVE-2026-4598 Fix available 8.7 HighMarch 23, 2026
• kjur jsrsasign, red hat migration toolkit for virtualization 2.1, migration toolkit for virtualization 2.9 +5 more +7 more jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass CVE-2026-4602 Fix available 8.7 HighMarch 23, 2026
• kjur jsrsasign, red hat migration toolkit for virtualization 2.1, migration toolkit for virtualization 2.9 +5 more +7 more jsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter validation in KJUR.crypto.DSA.setPublic CVE-2026-4600 Fix available 9.1 CriticalMarch 23, 2026
• kjur jsrsasign Marvin Attack of RSA and RSAOAEP decryption in jsrsasign CVE-2024-21484 Fix available 7.5 HighJanuary 19, 2024
• kjur jsrsasign Improper Verification of Cryptographic Signature CVE-2022-25898 Fix available 7.7 HighJune 25, 2022
• kjur jsrsasign RSA signature validation vulnerability on maleable encoded message in jsrsasign CVE-2021-30246 Fix available 9.1 CriticalApril 7, 2021
• kjur jsrsasign, netapp max data +1 more ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign CVE-2020-14966 Fix available 7.5 HighJune 22, 2020
• kjur jsrsasign, netapp max data +1 more RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign CVE-2020-14968 Fix available 9.8 CriticalJune 22, 2020
• kjur jsrsasign, netapp max data +1 more RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign CVE-2020-14967 Fix available 9.8 CriticalJune 22, 2020