{"action":"Upgrade elliptic to 6.5.4 or later.","affected":[{"fixed":"6.5.4","introduced":"0"}],"component":"elliptic","cve_ids":["CVE-2020-28498"],"ecosystem":"npm","epss":0.0125,"exploited":false,"fixed_versions":["6.5.4"],"ghsa_id":"GHSA-r9p9-mrjm-926w","id":"tcs_01M5KG8N1NCP47AE0RZN06H1XQ","modified_at":"2025-01-14T08:57:29.466454Z","published_at":"2021-03-08T16:06:50Z","references":["https://osv.dev/vulnerability/GHSA-r9p9-mrjm-926w","https://nvd.nist.gov/vuln/detail/CVE-2020-28498","https://github.com/indutny/elliptic/pull/244/commits","https://github.com/indutny/elliptic/commit/441b7428b0e8f6636c42118ad2aaa186d3c34c3f","https://github.com/christianlundkvist/blog/blob/master/2020_05_26_secp256k1_twist_attacks/secp256k1_twist_attacks.md","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1069836","https://snyk.io/vuln/SNYK-JS-ELLIPTIC-1064899","https://www.npmjs.com/package/elliptic"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-r9p9-mrjm-926w","url":"https://osv.dev/vulnerability/GHSA-r9p9-mrjm-926w"}],"summary":"Elliptic Uses a Broken or Risky Cryptographic Algorithm"}