Skip to content

Commit 289dbc3

Browse files
owlcodefanatid
authored andcommitted
Update elliptic to 6.5.7 (CVE-2024-42461) (#206)
* Update elliptic to 6.5.7 (CVE-2024-42461) In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed. See https://nvd.nist.gov/vuln/detail/CVE-2024-42461 https://security.snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918
1 parent 47551dc commit 289dbc3

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@
5252
"bn.js": "^4.11.8",
5353
"create-hash": "^1.2.0",
5454
"drbg.js": "^1.0.1",
55-
"elliptic": "^6.5.2",
55+
"elliptic": "^6.5.7",
5656
"nan": "^2.14.0",
5757
"safe-buffer": "^5.1.2"
5858
},

0 commit comments

Comments
 (0)