~ / search / GHSA-5jx8-q4cp-rhh6

GHSA-5jx8-q4cp-rhh6

jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-4599

Packages

EcosystemPackageAffectedFixed in
npm jsrsasign >= 7.0.0, < 11.1.1 11.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions in src/crypto-1.1.js; an attacker can recover the private key by exploiting the incorrect compareTo checks that accept out-of-range candidates and thus bias DSA nonces during signature generation.

References

External links from the advisory. They lead to third-party sites.