MEDIUM5.3
GHSA-434g-2637-qmqr
Elliptic's verify function omits uniqueness validation
Quick fix
GHSA-434g-2637-qmqr — elliptic: upgrade to the fixed version with the command below.
npm install elliptic@6.5.6Details
The Elliptic package 6.5.5 for Node.js for EDDSA implementation does not perform the required check if the signature proof(s) is within the bounds of the order n of the base point of the elliptic curve, leading to signature malleability. Namely, the `verify` function in `lib/elliptic/eddsa/index.js` omits `sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()` validation.
This vulnerability could have a security-relevant impact if an application relies on the uniqueness of a signature.
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-48949[ADVISORY]
- https://github.com/indutny/elliptic/commit/7ac5360118f74eb02da73bdf9f24fd0c72ff5281[WEB]
- https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof[WEB]
- https://github.com/indutny/elliptic[PACKAGE]
- https://github.com/indutny/elliptic/compare/v6.5.5...v6.5.6[WEB]
- https://security.netapp.com/advisory/ntap-20241227-0003[WEB]