Improper Verification Of Cryptographic Signature

browserify-sign is vulnerable to Improper Verification Of Cryptographic Signature. An upper bound check issue in DSA verification allows an attacker to construct signatures that can be successfully verified by any public key, which leads to a signature forgery attack. The attacker could exploit this vulnerability by tricking a user into signing a malicious message with their private key. The attacker could then use the forged signature to impersonate the user or to authorize malicious transactions.