Skip to content
Threat Feed
Subscribe

Tag

Nonce-Bias

1 brief RSS
critical advisory

jsrsasign DSA Nonce Bias Vulnerability (CVE-2026-4599)

jsrsasign versions 7.0.0 through 11.1.1 are vulnerable to a DSA nonce bias due to incomplete comparison checks in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions, potentially allowing an attacker to recover the private key.

jsrsasign DSA nonce-bias cryptography CVE-2026-4599
2r 1t