CVE-2026-27452

MOYENNE 5.3CVE-2026-27452 · Published 21/02/2026 · updated 17/06/2026

En bref

CVE-2026-27452 est une vulnérabilité MOYENNE (CVSS 5.3) touchant asn1-ts (jonathanwilbur).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.30%, plus élevée que 23.0% des vulnérabilités.
Correctif : mettre à jour vers 11.0.6 ou plus récent.

Package	Affected versions	Patched versions
asn1-ts jonathanwilbur	`< 11.0.6`	`11.0.6`

Description

ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER). In versions 11.0.5 and below, in some cases, decoding an INTEGER could leak the underlying ArrayBuffer. This issue is expected to be fixed in version 11.0.6.

References

JonathanWilbur/asn1-ts security advisory · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free