StableLib @stablelib/ed25519 vulnerabilities

Latest StableLib @stablelib/ed25519 CVEs

Newest publication first

1. GHSA-x3ff-w252-2g7j StableLib Ed25519 Signature Malleability via Missing S < L Check

   Published 2026-04-01

   Medium·CVSS 5.3

   Ed25519 Signature Malleability via Missing S < L Check -- Same Class as node-forge CVE-2026-33895 (CWE-347) Target Repository: StableLib/stablelib (package: @stablelib/ed25519) Platform: GitHub PVR Bounty: CVE credit CWE: CWE-347 (Improper Verification of Cryptographic Signature)...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.