Debian/node-bn.js: unknown
This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, han
Action: Upgrade node-bn.js to 5.2.3+~5.2.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.3+~5.2.0-1 | - |
Fixed versions
| 5.2.3+~5.2.0-1 |
Sources
- osv: DEBIAN-CVE-2026-2739#Debian:14/node-bn.js
- https://security-tracker.debian.org/tracker/CVE-2026-2739
published · modified · JSON