PT-2021-11554 · Elliptic · Elliptic

Name of the Vulnerable Software and Affected Versions: elliptic versions prior to 6.5.4 Description: The issue is related to Cryptographic Issues via the secp256k1 implementation in elliptic/ec/key.js. There is no check to confirm that the public key point passed into the derive function actually...