CVE-2024-42461

Published August 2nd, 2024

View on NVD ↗

CVSS v3

9.1

CRITICAL

CVSS v2

N/A

Affected

1

PROJECT

Description

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.

indutny/elliptic

Fast Elliptic Curve Cryptography in plain javascript

GitHub

1.76K