VULNERABILITY INTELLIGENCE

CVE-2026-27452

CVSS score9.2 CRITICAL

EPSS probability0.30%

CISA KEVNot currently listed

Published2026-02-21

Last modified2026-06-17

Description

ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER). In versions 11.0.5 and below, in some cases, decoding an INTEGER could leak the underlying ArrayBuffer. This issue is expected to be fixed in version 11.0.6.