Skip to content
OpenAdvisories

Package · Debian

node-elliptic

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2020-13822

    Signature Malleabillity in elliptic

    The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact if an application relied on a single canonical signature.

    elliptic node-elliptic node-elliptic Debian Ubuntu npm