Internet Computer

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Internet Computer records in CISA KEV

No Internet Computer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Candid 1 record MEDIUM Canister Developer Kit For The Internet Computer 1 record MEDIUM Icp-js-core 1 record MEDIUM Motoko 1 record LOW Stable Structures 1 record LOW

Records

1 record in Icp-js-core · all components

TI-2024-01514 CVE-2024-1631 · GHSA-c9vv-fhgv-cjc3

agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`

MEDIUM 49

Impact: The library offers a function to generate an ed25519 key pair via Ed25519KeyIdentity.generate with an optional param to provide a 32 byte seed value, which will then be used as the secret key.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00882 Published 2024-02-21 Fixed in v1.0.1, 1.0.1 CWE-321

Open these records in search →

Critical	1
High	3
Medium	1
Low	0
No CVSS	0