USN-6800-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 30 May 2024, 10:12
Last modified:04 Feb 2026, 03:11

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

30 May 2024, 10:12
Published
Vulnerability first disclosed
04 Feb 2026, 03:11
Last Modified
Vulnerability information updated

Description

node-browserify-sign vulnerability It was discovered that browserify-sign incorrectly handled an upper bound check in signature verification. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to perform a signature forgery attack.

Affected Systems

  • ubuntu•node-browserify-sign

    < 4.0.4-2ubuntu0.18.04.1~esm1 | < 4.0.4-2ubuntu0.20.04.1 | < 4.2.1-2ubuntu0.1

References (2)