Skip to content
OpenAdvisories

Product · cryptocoinjs

secp256k1-node

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2024-48930

    secp256k1-node vulnerable to private key extraction over ECDH

    secp256k1-node is a Node.js binding for an Optimized C library for EC operations on curve secp256k1. In `elliptic`-based version, `loadUncompressedPublicKey` has a check that the public key is on the curve. Prior to versions 5.0.1, 4.0.4, and 3.8.1, however, …

    cryptocoinjs secp256k1-node secp256k1 npm