ASN.1 TypeScript Library Integer Decoding Vulnerability Leading to ArrayBuffer Leak
Vulnerability
A vulnerability exists in the ASN.1 TypeScript ESM library, specifically in versions 11.0.5 and prior. The issue arises in the decoding process of INTEGER values, which can inadvertently expose the underlying ArrayBuffer. This vulnerability is classified as critical and is expected to be resolved in version 11.0.6.
Impact
Decoding INTEGER values can leak the underlying ArrayBuffer, potentially exposing sensitive data.
Remediation
Users can upgrade to version 11.0.6 to address this vulnerability.
Added: Feb 21, 2026, 7:37 AM
Updated: Feb 21, 2026, 7:37 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
7.4remediation
0.0relevance
3.2threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.