npm/elliptic

Elliptic's verify function omits uniqueness validation

Modified: 11/27/2025

Elliptic allows BER-encoded signatures

Modified: 11/4/2025

Elliptic Uses a Cryptographic Primitive with a Risky Implementation

Modified: 9/10/2026

Elliptic's ECDSA missing check for whether leading bit of r and s is zero

Modified: 11/4/2025

Elliptic's EDDSA missing signature length check

Modified: 11/4/2025

Valid ECDSA signatures erroneously rejected in Elliptic

Modified: 11/27/2025

Elliptic Uses a Broken or Risky Cryptographic Algorithm

Modified: 1/14/2025

Signature Malleabillity in elliptic

Modified: 10/16/2024

Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)

Modified: 2/12/2025