CVE-2026-4598
EUVD-2026-1437123.03.2026, 06:16
Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such crafted values (e.g., modInverse(0, m) or modInverse(-1, m)).
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| jsrsasign_project | jsrsasign | 𝑥 < 11.1.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration