@bundly/ic-core-js (>=0.1.0, <=0.4.2-rc.4), @bundly/ic-react (>=0.1.0, <=0.4.2-rc.4) +10 more potentially affected by CVE-2024-1631 via @dfinity/identity (>=0.20.2, <=0.21.4)

@dfinity/identity NPM version =0.20.2, =0.1.0, =0.1.0, =0.1.1, =0.0.1, =0.0.1, =0.0.44, =0.0.38-next-2023-12-19, =1.0.0, =0.0.1, =1.0.0, =1.0.1 Source cves: CVE-2024-1631 Source advisory: OSV:GHSA-C9VV-FHGV-CJC3...

PT-2024-18179

Name of the Vulnerable Software and Affected Versions @dfinity/identity versions prior to 1.0.1 Description The library offers a function to generate an ed25519 key pair via Ed25519KeyIdentity.generate with an optional param to provide a 32 byte seed value, which will then be used as the secret...