CVE-2026-4600

The record

Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPublic (and the related DSA/X509 verification flow in src/dsa-2.0.js). An attacker can forge DSA signatures or X.509 certificates that X509.verifySignature() accepts by supplying malicious domain parameters such as g=1, y=1, and a fixed r=1, which make the verification equation true for any hash.

Affected packages

Related vulnerabilities

• GHSA-wvqx-v3f6-w8rh jsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter… Same vulnerability
• GHSA-464q-cqxq-xhgr jsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output… Also affects jsrsasign
• GHSA-5jx8-q4cp-rhh6 jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce… Also affects jsrsasign
• GHSA-8qwj-4jxw-m8jw jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass Also affects jsrsasign
• GHSA-8g7p-jf3g-gxcp jsrsasign is vulnerable to DoS through Infinite Loop when processing zero or negative… Also affects jsrsasign
• GHSA-w8q8-93cx-6h7r jsrsasign: Missing cryptographic validation during DSA signing enables private key… Also affects jsrsasign
• CVE-2026-4603 Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to… Also affects jsrsasign
• CVE-2026-4602 Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion… Also affects jsrsasign