A vulnerability marked as problematic has been reported in jsrsasign up to 11.1.0. Impacted is the function
KJUR.crypto.DSA.signWithMessageHash of the component Private Key Handler. This manipulation causes missing cryptographic step.
The identification of this vulnerability is CVE-2026-4601. It is possible to initiate the attack remotely. There is no exploit available.
It is suggested to upgrade the affected component.
