Browserify

Browserify-sign

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-46234

  • EPSS 0.35%
  • Published 26.10.2023 15:15:09
  • Last modified 10.04.2025 20:47:25

browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. An upper bound check issue in `dsaVerify` function allows an attacker to construct sig...