Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-2739

Опубликовано: 20 фев. 2026
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.

EPSS

Процентиль: 38%
0.00467
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 5.3
ubuntu
6 месяцев назад

This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.

CVSS3: 5.3
redhat
6 месяцев назад

This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.

msrc
5 месяцев назад

This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.

CVSS3: 5.3
debian
6 месяцев назад

This affects versions of the package bn.js before 5.2.3. Calling maskn ...

CVSS3: 5.3
github
6 месяцев назад

bn.js affected by an infinite loop

EPSS

Процентиль: 38%
0.00467
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-835