Skip to content
OpenAdvisories

Package · npm

ecdh

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2022-44310

    ecdh vulnerable to Exposure of Resource to Wrong Sphere

    In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived shared secret.

    ecdh npm