Security Advisory
CVE-2024-42461
9.1
CRITICAL
Vulnerability Description
In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.
Published Date
August 2, 2024
Official Source
NIST NVD Advisory