Read the docs

Bitwiseshiftleft

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Bitwiseshiftleft records in CISA KEV

No Bitwiseshiftleft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Stanford Javascript Crypto Library 1 record HIGH

Records

1 record in Stanford Javascript Crypto Library · all components

TI-2026-03705 CVE-2026-4258 · GHSA-2w8x-224x-785m

Improper signature verification in sjcl

Priority HIGH 77

Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.ecc.basicKey.publicKey().

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00261 Published 2026-03-17 Fixed in 1.0.9 CWE-347
Open these records in search →