Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-42461

Aug. 2, 2024, 12:59 p.m.

Product(s) Impacted

Node.js Elliptic package

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.

Published: Aug. 2, 2024, 7:16 a.m.

Last Modified: Aug. 2, 2024, 12:59 p.m.

CVE has been recently published to the CVE List and has been received by the NVD.

More info

cve@mitre.org

https://github.com/ cve@mitre.org