Skip to content

PatchFirst · Latest vulnerabilities

bn.js vulnerabilities

Vulnerabilities published for bn.js in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerability: 1

CVE-2026-2739
Medium · CVSS 6.9EPSS 0.53%Fix available
CVE-2026-2739
This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.
bn.js bn.js Node.js
- Update to 4.12.3
- Update to 5.2.3
Published February 20, 2026Updated February 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →