CVE-2024-42459 - Elliptic EDDSA Signature Malleability

CVE ID : CVE-2024-42459 Published : Aug. 2, 2024, 7:16 a.m. | 2 hours, 43 minutes ago Description : In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Aug 2, 2024 - 12:00
 0  2
CVE-2024-42459 - Elliptic EDDSA Signature Malleability
CVE ID : CVE-2024-42459
Published : Aug. 2, 2024, 7:16 a.m. | 2 hours, 43 minutes ago
Description : In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...