Elliptic Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Elliptic Project records in CISA KEV

No Elliptic Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Elliptic · all components

TI-2024-28429 CVE-2024-42461 · GHSA-49q7-c7j4-3p7m

MEDIUM 46

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00617 Published 2024-08-02 Partial fix · 6.5.7 CWE-347