{"action":"Upgrade elliptic to 6.5.7 or later.","affected":[{"fixed":"6.5.7","introduced":"4.0.0"}],"component":"elliptic","cve_ids":["CVE-2024-42459"],"ecosystem":"npm","epss":0.00302,"exploited":false,"fixed_versions":["6.5.7"],"ghsa_id":"GHSA-f7q4-pwc6-w24p","id":"tcs_01M5KFMWJMAT5J3SJ8PJWZRK90","modified_at":"2025-11-04T16:51:32Z","published_at":"2024-08-02T09:31:35Z","references":["https://osv.dev/vulnerability/GHSA-f7q4-pwc6-w24p","https://nvd.nist.gov/vuln/detail/CVE-2024-42459","https://github.com/indutny/elliptic/pull/317","https://github.com/indutny/elliptic/commit/accb61e9c1a005e5c8ff96a8b33893100bb42d11","https://github.com/indutny/elliptic/commit/c0690b36be043ee73c1780ae4b7df48632b11cf9","https://github.com/indutny/elliptic","https://security.netapp.com/advisory/ntap-20241004-0005"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-f7q4-pwc6-w24p","url":"https://osv.dev/vulnerability/GHSA-f7q4-pwc6-w24p"}],"summary":"Elliptic's EDDSA missing signature length check"}