Skip to content
Threat Feed

Tag

Missing-Cryptographic-Step

1 brief RSS
critical advisory

jsrsasign DSA Signing Vulnerability (CVE-2026-4601)

jsrsasign versions before 11.1.1 are vulnerable to a missing cryptographic step in the DSA signing implementation, allowing an attacker to recover the private key by manipulating the signature generation process.

jsrsasign dsa missing-cryptographic-step CVE-2026-4601
2r 1t