Secp256k1-js Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Secp256k1-js Project records in CISA KEV

No Secp256k1-js Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2022-19833 CVE-2022-41340 · GHSA-q3f4-9h4p-vgr3

MEDIUM 40

The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00699 Published 2022-09-24 Fixed in 1.1.0 CWE-347