Skip to contentKjur Jsrsasign vulnerabilities
- kjur jsrsasignjsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output in RSA OperationsCVE-2026-4603Fix available5.1 Medium
- kjur jsrsasign, red hat migration toolkit for virtualization 2.1, migration toolkit for virtualization 2.9 +5 more +7 morejsrsasign: Missing cryptographic validation during DSA signing enables private key extractionCVE-2026-4601Fix available9.4 Critical
- kjur jsrsasign, red hat migration toolkit for virtualization 2.1, migration toolkit for virtualization 2.9 +5 more +7 morejsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce GenerationCVE-2026-4599Fix available9.3 Critical
- kjur jsrsasign, red hat migration toolkit for virtualization 2.1, migration toolkit for virtualization 2.9 +5 more +7 morejsrsasign is vulnerable to DoS through Infinite Loop when processing zero or negative inputsCVE-2026-4598Fix available8.7 High
- kjur jsrsasign, red hat migration toolkit for virtualization 2.1, migration toolkit for virtualization 2.9 +5 more +7 morejsrsasign: Negative Exponent Handling Leads to Signature Verification BypassCVE-2026-4602Fix available8.7 High
- kjur jsrsasign, red hat migration toolkit for virtualization 2.1, migration toolkit for virtualization 2.9 +5 more +7 morejsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter validation in KJUR.crypto.DSA.setPublicCVE-2026-4600Fix available9.1 Critical
- kjur jsrsasignMarvin Attack of RSA and RSAOAEP decryption in jsrsasignCVE-2024-21484Fix available7.5 High
- kjur jsrsasignImproper Verification of Cryptographic SignatureCVE-2022-25898Fix available7.7 High
- kjur jsrsasignRSA signature validation vulnerability on maleable encoded message in jsrsasignCVE-2021-30246Fix available9.1 Critical
- kjur jsrsasign, netapp max data +1 moreECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasignCVE-2020-14966Fix available7.5 High
- kjur jsrsasign, netapp max data +1 moreRSA-PSS signature validation vulnerability by prepending zeros in jsrsasignCVE-2020-14968Fix available9.8 Critical
- kjur jsrsasign, netapp max data +1 moreRSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasignCVE-2020-14967Fix available9.8 Critical