3 matches found
GHSA-977X-G7H5-7QGW Elliptic's ECDSA missing check for whether leading bit of r and s is zero
In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit of r and s is zero...
6.9CVSS6.8AI score0.00459EPSS
SaveExploits1References6
AZL-47430 CVE-2024-42460 affecting package reaper for versions less than 3.1.1-11
In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit of r and s is zero...
5.3CVSS6.6AI score0.00459EPSS
SaveExploits1References1
20