Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/30 11:02 p.m.•3 views

Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

Summary BigInteger.prototype.modInverse in node-forge's bundled jsbn library enters an infinite loop when the value or the modulus is negative, for example when a negative public exponent is passed to forge.pki.rsa.generateKeyPair. This is an incomplete fix of CVE-2026-33891 GHSA-5m6q-g25r-mvwx,...

7.5CVSS5.8AI score0.00607EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder