jsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter validation in KJUR.crypto.DSA.setPublic
Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPublic (and the related DSA/X509 verification flow in src/dsa-2.0.js). An attacker can forge DSA signatures or X.509 certificates that X509.verifySignature() accepts by supplying malicious domain parameters such as g=1, y=1, and a fixed r=1, which make the verification equation true for any hash.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-4600US | critical9.1 | — | ||
Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPub… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2026:19375WEB
- https://access.redhat.com/errata/RHSA-2026:19409WEB
- https://access.redhat.com/errata/RHSA-2026:19410WEB
- https://access.redhat.com/errata/RHSA-2026:6568WEB
- https://access.redhat.com/errata/RHSA-2026:6720WEB
- https://access.redhat.com/errata/RHSA-2026:6912WEB
- https://access.redhat.com/errata/RHSA-2026:6926WEB
- https://access.redhat.com/security/cve/CVE-2026-4600WEB
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan