Security Advisory

CVE-2024-42461

9.1
CRITICAL

Vulnerability Description

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.
Published Date August 2, 2024
Official Source NIST NVD Advisory