Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package bn.js, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (1)
CVE-2026-2739 — CVSS 5.3 (medium): This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing…