CVE-2024-21484
1 advisory.
npm/jsrsasign CVE-2024-21484: high 7.5
Marvin Attack of RSA and RSAOAEP decryption in jsrsasign
Action: Upgrade jsrsasign to 11.0.0 or later.
npm i jsrsasign@11.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.0.0 | - |
Fixed versions
| 11.0.0 |
Sources
- osv: GHSA-rh63-9qcf-83gf
- https://github.com/kjur/jsrsasign/security/advisories/GHSA-rh63-9qcf-83gf
- https://nvd.nist.gov/vuln/detail/CVE-2024-21484
- https://github.com/kjur/jsrsasign/issues/598
- https://github.com/kjur/jsrsasign
- https://github.com/kjur/jsrsasign/releases/tag/11.0.0
- https://people.redhat.com/~hkario/marvin
- https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-6070734
- https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBKJUR-6070733
- https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-6070732
- https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-6070731
CVE-2024-21484 · published · modified · JSON