browserify browserify-sign

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2023-46234>= 2.6.0, <= 4.2.1browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attackHIGH 7.50.6 %