Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-2739

Опубликовано: 20 фев. 2026
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.

EPSS

Процентиль: 5%
0.0002
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 1 месяца назад

This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.

CVSS3: 5.3
redhat
около 1 месяца назад

This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.

msrc
30 дней назад

This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.

CVSS3: 5.3
debian
около 1 месяца назад

This affects versions of the package bn.js before 5.2.3. Calling maskn ...

CVSS3: 5.3
github
около 1 месяца назад

bn.js affected by an infinite loop

EPSS

Процентиль: 5%
0.0002
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-835