npm/jsrsasign

ECDSA signature vulnerability of Minerva timing attack in jsrsasign

Modified: 9/22/2021

RSA signature validation vulnerability on maleable encoded message in jsrsasign

Modified: 11/8/2023

JWS and JWT signature validation vulnerability with special characters

Modified: 1/14/2025

jsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output in RSA Operations

Modified: 3/30/2026

jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation

Modified: 7/21/2026

jsrsasign is vulnerable to DoS through Infinite Loop when processing zero or negative inputs

Modified: 7/21/2026

jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass

Modified: 7/21/2026

Signatures are mistakenly recognized to be valid in jsrsasign

Modified: 2/15/2022

ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign

Modified: 11/8/2023

RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign

Modified: 11/8/2023

Marvin Attack of RSA and RSAOAEP decryption in jsrsasign

Modified: 2/27/2024

jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction

Modified: 3/29/2026

jsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter validation in KJUR.crypto.DSA.setPublic

Modified: 7/21/2026

RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign

Modified: 11/8/2023