Elliptic Project Elliptic vulnerabilities

1 known vulnerability affecting elliptic_project/elliptic.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2024-42461CRITICALCVSS 9.1v6.5.62024-08-02

CVE-2024-42461 [CRITICAL] CWE-347 CVE-2024-42461: In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded s In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.