GHSA-c6rr-7pmc-73wc
NoneCVSS
—
EPSS
—
Published
Feb 25, 2026
CISA due date
—
The record
ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @ensdomains/ens-contracts | 0 | No fix |
Related vulnerabilities
- CVE-2026-22866 Ethereum Name Service (ENS) is a distributed, open, and extensible naming system based on… Same vulnerability
- CVE-2026-87947 Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO… CWE-347
- CVE-2026-84918 Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment… CWE-347
- CVE-2026-102271 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102272 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102273 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102268 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102266 PyJWT is a Python implementation of JSON Web Token standards. CWE-347