npm/jsrsasign: medium 5.9
ECDSA signature vulnerability of Minerva timing attack in jsrsasign
Action: Upgrade jsrsasign to 8.0.13 or later.
npm i jsrsasign@8.0.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 8.0.13 | - |
Fixed versions
| 8.0.13 |
Sources
- osv: GHSA-g753-jx37-7xwh
- https://github.com/kjur/jsrsasign/security/advisories/GHSA-g753-jx37-7xwh
- https://github.com/kjur/jsrsasign/issues/411
- https://github.com/kjur/jsrsasign/commit/9dcb89c57408a3d4b5b66aa9138426bd92819e73
- https://github.com/kjur/jsrsasign
- https://github.com/kjur/jsrsasign/releases/tag/8.0.13
- https://minerva.crocs.fi.muni.cz
- https://snyk.io/vuln/SNYK-JS-JSRSASIGN-561755
- https://www.npmjs.com/advisories/1505
published · modified · JSON