Package · Debian

node-elliptic

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2024-42461 Public exploit

Elliptic allows BER-encoded signatures

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.

elliptic node-elliptic node-elliptic Debian Ubuntu npm

Aug 2, 2024