bn.js

  1. bn.js CVE-2026-2739 DoS: Upgrade to 5.2.3 to prevent maskn(0) hang

    A subtle bug in a core JavaScript big‑number library has turned into a practical availability risk for Node.js applications: calling maskn(0) on a BN instance in versions of bn.js older than 5.2.3 can corrupt the object’s internal state and send commonly used methods such as toString() and...