Skip to content
OpenAdvisories

Package · Debian

node-create-ecdh

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.9
    CVE-2026-129319

    create-ecdh: computeSecret does not validate that the peer public key is on the curve (invalid-curve attack)

    create-ecdh is a browserifiable implementation of Node.js crypto.createECDH. In versions 4.0.4 and below, the JavaScript implementation (browser.js, used by browser bundlers and on Node.js versions without a working native crypto.createECDH) did not validate …

    browserify createECDH node-create-ecdh Debian