elliptic: Elliptic's ECDSA missing check for whether leading bit of r and s is zero
Elliptic's ECDSA missing check for whether leading bit of r and s is zero (low). GHSA-977x-g7h5-7qgw, CVE-2024-42460.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Elliptic's ECDSA missing check for whether leading bit of r and s is zero
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?