CVE-2020-28498
1 advisory.
npm/elliptic CVE-2020-28498: medium 6.8, EPSS 1.23%
Elliptic Uses a Broken or Risky Cryptographic Algorithm
Action: Upgrade elliptic to 6.5.4 or later.
npm i elliptic@6.5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.5.4 | - |
Fixed versions
| 6.5.4 |
Sources
- osv: GHSA-r9p9-mrjm-926w
- https://nvd.nist.gov/vuln/detail/CVE-2020-28498
- https://github.com/indutny/elliptic/pull/244/commits
- https://github.com/indutny/elliptic/commit/441b7428b0e8f6636c42118ad2aaa186d3c34c3f
- https://github.com/christianlundkvist/blog/blob/master/2020_05_26_secp256k1_twist_attacks/secp256k1_twist_attacks.md
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1069836
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-1064899
- https://www.npmjs.com/package/elliptic
CVE-2020-28498 · published · modified · JSON