5721 matches found
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to missing scalar checks in the Verify and prepareVerification functions. An attacker can produce multiple valid signatures for the same message by manipulating the S value in EdDSA a...
CVE-2025-57801 gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks
gnark is a zero-knowledge proof system framework. In versions prior to 0.14.0, the Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S order, leading to a signature malleability vulnerability. Because gnark’s native EdDSA and ECDSA circuits lack...
PT-2025-34495
Name of the Vulnerable Software and Affected Versions: gnark versions prior to 0.14.0 Description: gnark is a zero-knowledge proof system framework. The Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S order, leading to a signature malleabili...
Malicious code in @zalastax/nolb-gulp-s (npm)
The package @zalastax/nolb-gulp-s was found to contain malicious code...
Malicious code in @zalastax/nolb-ng-s (npm)
The package @zalastax/nolb-ng-s was found to contain malicious code...
Malicious code in @zalastax/nolb-passport-s (npm)
The package @zalastax/nolb-passport-s was found to contain malicious code...
Malicious code in @zalastax/nolb-eslint-s (npm)
The package @zalastax/nolb-eslint-s was found to contain malicious code...
Malicious code in @zalastax/nolb-node-red-s (npm)
The package @zalastax/nolb-node-red-s was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-s (npm)
The package @zalastax/nolb-graphql-s was found to contain malicious code...
Malicious code in @zalastax/nolb-google-s (npm)
The package @zalastax/nolb-google-s was found to contain malicious code...
Malicious code in @zalastax/nolb-ngx-s (npm)
The package @zalastax/nolb-ngx-s was found to contain malicious code...
Malicious code in @zalastax/nolb-lion-s (npm)
The package @zalastax/nolb-lion-s was found to contain malicious code...
Malicious code in @zalastax/nolb-nodebb-s (npm)
The package @zalastax/nolb-nodebb-s was found to contain malicious code...
Malicious code in @zalastax/nolb-qmuzik-s (npm)
The package @zalastax/nolb-qmuzik-s was found to contain malicious code...
Malicious code in @zalastax/nolb-lion-lib-s (npm)
The package @zalastax/nolb-lion-lib-s was found to contain malicious code...
Malicious code in @zalastax/nolb-node-s (npm)
The package @zalastax/nolb-node-s was found to contain malicious code...
s-collection.js (=1.0.0) potentially affected by unknown CVE via lodash.js (=0.0.1-security)
lodash.js NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodash.js and may be impacted: - s-collection.js =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25506...
Malicious code in @zalastax/nolb-api-s (npm)
The package @zalastax/nolb-api-s was found to contain malicious code...
