jsrsasign
opensource free pure JavaScript cryptographic library supports RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp and CAdES and JSON Web Signature(JWS)/Token(JWT)/Key(JWK)
Security Advisories for jsrsasign in npm
High
5 months ago
jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction
npm
jsrsasign
Critical
5 months ago
jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation
npm
jsrsasign
High
5 months ago
jsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter validation in KJUR.crypto.DSA.setPublic
npm
jsrsasign
High
5 months ago
jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass
npm
jsrsasign
Low
5 months ago
jsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output in RSA Operations
npm
jsrsasign
High
5 months ago
jsrsasign is vulnerable to DoS through Infinite Loop when processing zero or negative inputs
npm
jsrsasign
High
about 4 years ago
JWS and JWT signature validation vulnerability with special characters
npm
jsrsasign
Moderate
over 4 years ago
Signatures are mistakenly recognized to be valid in jsrsasign
npm
jsrsasign
Critical
over 5 years ago
RSA signature validation vulnerability on maleable encoded message in jsrsasign
npm
jsrsasign
Moderate
about 6 years ago
ECDSA signature vulnerability of Minerva timing attack in jsrsasign
npm
jsrsasign
High
about 6 years ago
ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign
npm
jsrsasign
Critical
about 6 years ago
RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign
npm
jsrsasign
Critical
about 6 years ago
RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign
npm
jsrsasign