CVE-2024-48949
1 advisory.
npm/elliptic CVE-2024-48949: medium 5.3
Elliptic's verify function omits uniqueness validation
Action: Upgrade elliptic to 6.5.6 or later.
npm i elliptic@6.5.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.5.6 | - |
Fixed versions
| 6.5.6 |
Sources
- osv: GHSA-434g-2637-qmqr
- https://nvd.nist.gov/vuln/detail/CVE-2024-48949
- https://github.com/indutny/elliptic/commit/7ac5360118f74eb02da73bdf9f24fd0c72ff5281
- https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof
- https://github.com/indutny/elliptic
- https://github.com/indutny/elliptic/compare/v6.5.5...v6.5.6
- https://security.netapp.com/advisory/ntap-20241227-0003
CVE-2024-48949 · published · modified · JSON