Vulnerabilities
Report: CVE-2026-4598 - Apache jsrsasign Infinite Loop Denial of Service
CVE ID :CVE-2026-4598 Published : March 23, 2026, 6:16 a.m. | 1 hour, 20 minutes ago Description :Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such crafted values (e.g., modInverse(0, m) or modInverse(-1, m)). Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...