PT-2026-20998

🗓️ 20 Feb 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 14 Views

Bug in bn.js pre 5.2.3: maskn(0) corrupts state, making toString and divmod hang.

Reporter	Title	Published	Views	Family All 1659
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	6 Aug 202513:40	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in the minimatch package affects IBM® Db2® Big SQL on IBM Cloud Pak for Data.	15 May 202614:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	1 Apr 202607:22	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains a potential denial of service (DoS) vulnerability	10 Apr 202613:04	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for July 2026.	5 Aug 202610:13	–	ibm
IBM Security Bulletins	Security Bulletin: : Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in dependencies	8 Jun 202614:50	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	28 Jun 202619:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Scheduler Optimizer uses dompurify-3.2.4.tgz which is vulnerable to CVE-2025-15599, CVE-2026-0540	10 Jun 202612:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in axios, follow-redirects, fast-uri and babel might affect IBM Storage Defender Sentinel Anomaly Scan Engine.	27 Jun 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses minimatch-3.1.2.tgz which is vulnerable to CVE-2026-26996, CVE-2026-27903, CVE-2026-27904	1 May 202611:55	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2025-22872
osv	www.osv.dev/vulnerability/ghsa-jg4p-7fhp-p32p
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-42041
suse	www.suse.com/security/cve/CVE-2026-42506
osv	www.osv.dev/vulnerability/CVE-2026-41238
suse	www.suse.com/security/cve/CVE-2026-42508
osv	www.osv.dev/vulnerability/ghsa-pf86-5x62-jrwf
osv	www.osv.dev/vulnerability/ghsa-cj63-jhhr-wcxv
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2026-2739
osv	www.osv.dev/vulnerability/CVE-2026-41239

25 Jun 2026 00:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 46.9 - 8.7

CVSS 3.17.5

EPSS0.00634

SSVC

bn.js maskn(0)infinite loop state corruption toString hang divmod hang