Kirill Fomichev

1 exploit Active since Feb 2026
CVE-2026-2739 WRITEUP MEDIUM WRITEUP
bn.js <5.2.3 - DoS
This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.
CVSS 5.3