Elliptic vulnerabilities

1 known vulnerability in Elliptic from Indutny. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Elliptic: Improper Verification of Cryptographic Signature

  CVE-2024-48949Oct 10, 2024Indutny

  The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()" validation.