browserify

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

browserify records in CISA KEV

No browserify vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Browserify-sign 1 record LOW Cipher-base 1 record HIGH Sha.js 1 record HIGH

Records

1 record in Browserify-sign · all components

TI-2023-24861 CVE-2023-46234 · GHSA-x9w5-v3q2-3rhw

browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack

LOW 34

browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00563 Published 2023-10-26 Partial fix · 4.2.2 CWE-347

Open these records in search →

Critical	2
High	1
Medium	1
Low	0
No CVSS	0