CVE-2026-27452

9.2 criticalEPSS 0.3%

Critical (9.2) in jonathanwilbur asn1-ts. EPSS 0.3% chance of exploitation in the next 30 days.

ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER). In versions 11.0.5 and below, in some cases, decoding an INTEGER could leak the underlying ArrayBuffer. This issue is expected to be fixed in version 11.0.6.

Severity

CVSS 4.0

9.2 critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2026-02-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jonathanwilbur:asn1-ts

References

https://github.com/JonathanWilbur/asn1-ts/security/advisories/GHSA-h5rw-vxjr-8q79

Check your stack JSON