Skip to content

Product

nodejs elliptic vulnerabilities

1 published CVE affecting nodejs elliptic, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest nodejs elliptic CVEs

Newest publication first

  1. CVE-2024-48948 Valid ECDSA signatures erroneously rejected in Elliptic

    Published
    MediumCVSS 4.8 EPSS 0.55%

    The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve's base point is smaller than the hash, because of an _truncateToN anomal...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.