Lucene search

K
cvelistMitreCVELIST:CVE-2022-41340
HistorySep 24, 2022 - 6:22 p.m.

CVE-2022-41340

2022-09-2418:22:27
mitre
www.cve.org
3
node.js
secp256k1-js package
signature forgery
ecdsa
missing validation

EPSS

0.001

Percentile

38.5%

The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery.

EPSS

0.001

Percentile

38.5%

Related for CVELIST:CVE-2022-41340