CVE-2026-4602
High · 7.5CVSS
7.5
EPSS
0.9%
Published
Mar 23, 2026
CISA due date
—
The record
Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js. An attacker can force the computation of incorrect modular inverses and break signature verification by calling modPow with a negative exponent.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | jsrsasign | 0 | 11.1.1 |
Related vulnerabilities
- GHSA-8qwj-4jxw-m8jw jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass Same vulnerability
- GHSA-464q-cqxq-xhgr jsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output… Also affects jsrsasign
- GHSA-5jx8-q4cp-rhh6 jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce… Also affects jsrsasign
- GHSA-8g7p-jf3g-gxcp jsrsasign is vulnerable to DoS through Infinite Loop when processing zero or negative… Also affects jsrsasign
- GHSA-wvqx-v3f6-w8rh jsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter… Also affects jsrsasign
- GHSA-w8q8-93cx-6h7r jsrsasign: Missing cryptographic validation during DSA signing enables private key… Also affects jsrsasign
- CVE-2026-4603 Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to… Also affects jsrsasign
- CVE-2026-4598 Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the… Also affects jsrsasign