Stanford Javascript Crypto Library vulnerabilities

1 known vulnerability in Stanford Javascript Crypto Library from Bitwiseshiftleft. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  sjcl: Improper Verification of Cryptographic Signature

  CVE-2026-4258Mar 17, 2026Sjcl

  Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.ecc.basicKey.publicKey(). An attacker can recover a victim's ECDH private key by sending crafted off-c