Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-848j-6mx2-7j84
  • npm/elliptic
 Elliptic Uses a Cryptographic Primitive with a Risky Implementation 08 Jan
  • No fix available
  • Severity - 2.9 (Low)
GHSA-vjh7-7g9h-fjfh
  • npm/elliptic
 Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string) 12 Feb 2025
  • Fix available
  • Severity - 9.0 (Critical)
GHSA-fc9h-whq2-v747
  • npm/elliptic
 Valid ECDSA signatures erroneously rejected in Elliptic 15 Oct 2024
  • Fix available
  • Severity - 2.3 (Low)
GHSA-434g-2637-qmqr
  • npm/elliptic
 Elliptic's verify function omits uniqueness validation 10 Oct 2024
  • Fix available
  • Severity - 2.7 (Low)
GHSA-49q7-c7j4-3p7m
  • npm/elliptic
 Elliptic allows BER-encoded signatures 02 Aug 2024
  • Fix available
  • Severity - 2.7 (Low)
GHSA-977x-g7h5-7qgw
  • npm/elliptic
 Elliptic's ECDSA missing check for whether leading bit of r and s is zero 02 Aug 2024
  • Fix available
  • Severity - 2.7 (Low)
GHSA-f7q4-pwc6-w24p
  • npm/elliptic
 Elliptic's EDDSA missing signature length check 02 Aug 2024
  • Fix available
  • Severity - 2.7 (Low)
MAL-2023-303
  • npm/elliptic-helper
 Malicious code in elliptic-helper (npm) 13 Jun 2023
  • No fix available
MAL-2023-304
  • npm/elliptic-parser
 Malicious code in elliptic-parser (npm) 13 Jun 2023
  • No fix available
GHSA-r9p9-mrjm-926w
  • npm/elliptic
 Elliptic Uses a Broken or Risky Cryptographic Algorithm 08 Mar 2021
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-vh7m-p724-62c2
  • npm/elliptic
 Signature Malleabillity in elliptic 29 Jul 2020
  • Fix available
  • Severity - 7.7 (High)