CVE-2026-4601

Name of the Vulnerable Software and Affected Versions jsrsasign versions prior to 11.1.1

Description A missing cryptographic step in the DSA signing implementation occurs during the KJUR.crypto.DSA.signWithMessageHash() process. An attacker can recover the private key by forcing the variables r or s to be zero, which causes the library to emit an invalid signature without retrying. The attacker can then solve for x using the resulting signature to obtain the private key.

Recommendations Update to version 11.1.1 or later.