Skip to content
OpenAdvisories

Package · Debian

node-bn.js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-2739

    bn.js affected by an infinite loop

    This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.

    bn.js node-bn.js node-bn.js Debian Ubuntu npm