Skip to content
OpenAdvisories

Vendor

browserify

2 known vulnerabilities.

Products

pbkdf2 1 browserify-sign 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-46234

    browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack

    browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. An upper bound check issue in `dsaVerify` function allows an attacker to construct signatures t…

    browserify browserify-sign node-browserify-sign browserify-sign Debian Ubuntu npm