Skip to content
OpenAdvisories

Archive

24 September 2022

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.5

    secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery

    The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery.