GitHub Advisoryadvisory · npm

GHSA-5jx8-q4cp-rhh6 jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation

CRITICAL Published 2026-03-23 Modified 2026-07-21 Official page ↗
Aliases
CVE-2026-4599
Ecosystem
npm
Packages
jsrsasign
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-1023, CWE-338
Reviewed
2026-03-30

Affected packages

• npm jsrsasign: >= 7.0.0, < 11.1.1 → fixed in 11.1.1

Description

Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions in src/crypto-1.1.js; an attacker can recover the private key by exploiting the incorrect compareTo checks that accept out-of-range candidates and thus bias DSA nonces during signature generation.

Related

Alias · CVE (1)

  • CVE-2026-4599 Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the… vulnerability

Weakness · CWE (2)

  • CWE-1023 Incomplete Comparison with Missing Factors weakness
  • CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) weakness

References