Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such crafted values (e.g., modInverse(0, m) or modInverse(-1, m)).
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-4598 Infinite Loop Vulnerability in jsrsasign Package Before 11.1.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4598
Post summary
A new infinite-loop vulnerability (CVE-2026-4598) has been disclosed for jsrsasign packages older than version 11.1.1, with a link provided to a vulnerability details page.
⚡ New CVE Alert: CVE-2026-4598 📊 Severity: 7.5 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4598 #CVE-2026-4598 #CVE #High #CyberSecurity #InfoSec https://t.co/phUXsijVzR
Post summary
The tweet announces the discovery of CVE-2026-4598, noting its severity (7.5) and high risk level without providing additional technical or mitigation details.
CVE-2026-4598 Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementat… https://www.cve.org/CVERecord?id=CVE-2026-4598
Post summary
CVE-2026-4598 reports an infinite loop bug in jsrsasign before v11.1.1; no PoC, exploit, patch, or active exploitation is cited.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | kjur | jsrsasign | - | node.js | - |