Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-41340
7.5
HIGHCVSS v3
Published
September 24, 2022
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery.
lionello/secp256k1-js
GitHubPure JS implementation of secp256k1 signing, verification, recovery ECDSA.
GitHubPure JS implementation of secp256k1 signing, verification, recovery ECDSA.< 1.1.0NVD
@lionello/secp256k1-js
NPMPure JS implementation of secp256k1 signing, verification, recovery ECDSA.
NPMPure JS implementation of secp256k1 signing, verification, recovery ECDSA.< 1.1.0NVD