Lucene search
+L

1 matches found

OSV
OSV
added 2025/06/30 5:44 p.m.8 views

GHSA-5VHG-9XG4-CV9M tiny-secp256k1 allows for verify() bypass when running in bundled environment

Summary A malicious JSON-stringifyable message can be made passing on verify, when global Buffer is buffer package Details This affects only environments where require'buffer' is E.g.: browser bundles, React Native apps, etc. Buffer.isBuffer check can be bypassed, resulting in strange objects bei...

9.1CVSS5.9AI score0.00215EPSS
SaveExploits0References4
Rows per page
Query Builder