{"action":"Upgrade elliptic to 6.6.0 or later.","affected":[{"fixed":"6.6.0","introduced":"0"}],"component":"elliptic","cve_ids":["CVE-2024-48948"],"ecosystem":"npm","epss":0.00553,"exploited":false,"fixed_versions":["6.6.0"],"ghsa_id":"GHSA-fc9h-whq2-v747","id":"tcs_01M5KFN76V7SP0GTSCJ2T962CH","modified_at":"2025-11-27T08:58:35.614129Z","published_at":"2024-10-15T15:30:56Z","references":["https://osv.dev/vulnerability/GHSA-fc9h-whq2-v747","https://nvd.nist.gov/vuln/detail/CVE-2024-48948","https://github.com/indutny/elliptic/issues/321","https://github.com/indutny/elliptic/pull/322","https://github.com/indutny/elliptic/commit/34c853478cec1be4e37260ed2cb12cdbdc6402cf","https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof","https://github.com/indutny/elliptic","https://security.netapp.com/advisory/ntap-20241220-0004"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-fc9h-whq2-v747","url":"https://osv.dev/vulnerability/GHSA-fc9h-whq2-v747"}],"summary":"Valid ECDSA signatures erroneously rejected in Elliptic"}