CVE-2026-27452: Jonathanwilbur ASN1-Ts

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER). In versions 11.0.5 and below, in some cases, decoding an INTEGER could leak the underlying ArrayBuffer. This issue is expected to be fixed in version 11.0.6.

Affected products

• Jonathanwilbur ASN1-Ts: before 11.0.6 (fixed in 11.0.6)

Published 2026-02-21. Last modified 2026-06-17.