jsrsasign vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

JS

Product

jsrsasign

by · last CVE Mar 23, 2026

6

CVEs

0

On KEV

9.1

Max CVSS

0

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 3High 2Medium 1Low 0

Severity

All severities6 Critical3 High2 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add jsrsasign to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-4601	9.1	0%	Mar 23	Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation Affected: before 11.1.1
CVE-2026-4599	9.1	0%	Mar 23	Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and… Affected: 7.0.0 before 11.1.1
CVE-2026-4600	9.1	0%	Mar 23	Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in… Affected: before 11.1.1