Skip to content
OpenAdvisories

Vendor

cryptocoinjs

2 known vulnerabilities.

Products

secp256k1-node 1 base-x 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2025-27611

    base-x homograph attack allows Unicode lookalike characters to bypass validation.

    base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This …

    cryptocoinjs base-x base-x npm
  • High 8.7
    CVE-2024-48930

    secp256k1-node vulnerable to private key extraction over ECDH

    secp256k1-node is a Node.js binding for an Optimized C library for EC operations on curve secp256k1. In `elliptic`-based version, `loadUncompressedPublicKey` has a check that the public key is on the curve. Prior to versions 5.0.1, 4.0.4, and 3.8.1, however, …

    cryptocoinjs secp256k1-node secp256k1 npm