@lionello/secp256k1-js

@lionello/secp256k1-js

NPMNPM
NPMwww.npmjs.com
GitHubgithub.com
Releases3
Frequency2 years 3 weeks
Last Release
Pure JS implementation of secp256k1 signing, verification, recovery ECDSA.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-41340↗
7.5 HIGH—

The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery.