Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/jsrsasign@4.8.0
purl pkg:npm/jsrsasign@4.8.0
Tags Ghost
Next non-vulnerable version 11.1.1
Latest non-vulnerable version 11.1.1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-qvhf-y18z-nkbf
Aliases:
CVE-2022-25898
GHSA-3fvg-4v2m-98jf
GMS-2022-2707
JWS and JWT signature validation vulnerability with special characters
10.5.25
Affected by 7 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-14T11:53:52.937612+00:00 GitLab Importer Affected by VCID-qvhf-y18z-nkbf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jsrsasign/CVE-2022-25898.yml 38.6.0
2026-06-11T20:31:43.503927+00:00 GHSA Importer Affected by VCID-qvhf-y18z-nkbf https://github.com/advisories/GHSA-3fvg-4v2m-98jf 38.6.0