Sjcl vulnerabilities
We track 1 vulnerability in Sjcl products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 17, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Sjcl vulnerabilities
- 7.5 High severity
sjcl: Improper Verification of Cryptographic Signature
Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.ecc.basicKey.publicKey(). An attacker can recover a victim's ECDH private key by sending crafted off-c