CVE-2026-129319

The create-ecdh library, a browserifiable implementation of Node.js crypto.createECDH, is vulnerable in versions 4.0.4 and below . The JavaScript implementation (browser.js) fails to validate peer public keys in ECDH.prototype.computeSecret or ECDH.prototype.setPublicKey, allowing an attacker to ...

org.webjars.npm:bitcore-lib (0.15.0), org.webjars.npm:bitcore-mnemonic (1.5.0) +6 more potentially affected by CVE-2025-14505 via org.webjars.npm:elliptic (>=6.4.0, <=6.6.1)

org.webjars.npm:elliptic MAVEN version =6.4.0, =4.0.0, =3.2.0, =4.0.2 Source cves: CVE-2025-14505 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14908845...