Kjur vulnerabilities

CVE-2026-4603 Medium · 5.3 CWE-369 Mar 23, 2026

Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due…

Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigInteger.modPowInt reduction logic in ext/jsbn.js. An attacker can force RSA public-key operations (e.g., verify and encryption) to collapse to deterministic zero outputs and hide “invalid key” errors by supplying a JWK whose modulus decodes to zero.

CVE-2026-4602 High · 7.5 CWE-681 Mar 23, 2026

Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion…

Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js. An attacker can force the computation of incorrect modular inverses and break signature verification by calling modPow with a negative exponent.

CVE-2026-4601 Critical · 9.1 CWE-325 Mar 23, 2026

Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic…

Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation. An attacker can recover the private key by forcing r or s to be zero, so the library emits an invalid signature without retrying, and then solves for x from the resulting signature.

CVE-2026-4600 Critical · 9.1 CWE-347 Mar 23, 2026

Improper Verification of Cryptographic Signature in Kjur Jsrsasign

Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPublic (and the related DSA/X509 verification flow in src/dsa-2.0.js). An attacker can forge DSA signatures or X.509 certificates that X509.verifySignature() accepts by supplying malicious domain parameters such as g=1, y=1, and a fixed r=1, which make the verification equation true for any hash.

CVE-2026-4599 Critical · 9.1 CWE-1023 Mar 23, 2026

Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to…

Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions in src/crypto-1.1.js; an attacker can recover the private key by exploiting the incorrect compareTo checks that accept out-of-range candidates and thus bias DSA nonces during signature generation.

CVE-2026-4598 High · 7.5 CWE-835 Mar 23, 2026

Infinite Loop in Kjur Jsrsasign

Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such crafted values (e.g., modInverse(0, m) or modInverse(-1, m)).