{"action":"Upgrade elliptic to 6.5.7 or later.","affected":[{"fixed":"6.5.7","introduced":"2.0.0"}],"component":"elliptic","cve_ids":["CVE-2024-42460"],"ecosystem":"npm","epss":0.00459,"exploited":false,"fixed_versions":["6.5.7"],"ghsa_id":"GHSA-977x-g7h5-7qgw","id":"tcs_01M5KFF35F6C5BH61WJV4J02QM","modified_at":"2025-11-04T16:52:43Z","published_at":"2024-08-02T09:31:35Z","references":["https://osv.dev/vulnerability/GHSA-977x-g7h5-7qgw","https://nvd.nist.gov/vuln/detail/CVE-2024-42460","https://github.com/indutny/elliptic/pull/317","https://github.com/indutny/elliptic/commit/accb61e9c1a005e5c8ff96a8b33893100bb42d11","https://github.com/indutny/elliptic/commit/b6ff1758d9a6d1a7aec177ff6df9f586492a6315","https://github.com/indutny/elliptic","https://security.netapp.com/advisory/ntap-20241004-0005"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-977x-g7h5-7qgw","url":"https://osv.dev/vulnerability/GHSA-977x-g7h5-7qgw"}],"summary":"Elliptic's ECDSA missing check for whether leading bit of r and s is zero"}