Skip to content
OpenAdvisories

Vendor

Internet Computer

5 known vulnerabilities.

Products

ic-cdk 1 Candid 1 ic-stable-structures 1 agent-js 1 Motoko 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2024-1631

    agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`

    Impact: The library offers a function to generate an ed25519 key pair via Ed25519KeyIdentity.generate with an optional param to provide a 32 byte seed value, which will then be used as the secret key. When no seed value is provided, it is expected that the li…

    Internet Computer agent-js @dfinity/auth-client @dfinity/identity npm