secp256k1-node icon indicating copy to clipboard operation
secp256k1-node copied to clipboard

Published 20 hours ago • verified publisher icon cryptocoinjs

Update elliptic to 6.5.7 (CVE-2024-42461)

Open owlcode opened this issue 6 months ago • 2 comments

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed. See https://nvd.nist.gov/vuln/detail/CVE-2024-42461 https://security.snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918

owlcode avatar Aug 20 '24 19:08 owlcode