Skip to content
OpenAdvisories

Package · Debian

node-browserify-sign

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.5
    CVE-2023-46234

    browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack

    browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. An upper bound check issue in `dsaVerify` function allows an attacker to construct signatures t…

    browserify browserify-sign node-browserify-sign browserify-sign Debian Ubuntu npm