Skip to content
OpenAdvisories

Package · Packagist

mdanter/ecc

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.3
    CVE-2024-33851

    mdanter/ecc affected by timing vulnerability in cryptographic side-channels

    phpecc, as used in paragonie/phpecc before 2.0.1, has a branch-based timing leak in Point addition. (This is related to phpecc/phpecc on GitHub, and the Matyas Danter ECC library.)

    mdanter/ecc paragonie/ecc Packagist
  • Critical 9.1
    GHSA-346h-749j-r28w

    PHPECC vulnerable to multiple cryptographic side-channel attacks

    ### ECDSA Canonicalization PHPECC is vulnerable to malleable ECDSA signature attacks. ### Constant-Time Signer When generating a new ECDSA signature, the GMPMath adapter was used. This class wraps the GNU Multiple Precision arithmetic library (GMP), which doe…

    mdanter/ecc Packagist