Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Manually update elliptic to v6.5.7 for security update #774

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Manually update elliptic to v6.5.7 for security update #774

wants to merge 1 commit into from

Commits on Aug 14, 2024

  1. Manually update elliptic to v6.5.7 for security update 

    Use `npm audit fix` to update one dependency in the lock.

elliptic v2.0.0 - 6.5.6 affected:
- Elliptic's ECDSA missing check for whether leading bit of r and s is zero - GHSA-977x-g7h5-7qgw
- Elliptic's EDDSA missing signature length check - GHSA-f7q4-pwc6-w24p
- Elliptic allows BER-encoded signatures - GHSA-49q7-c7j4-3p7m
    @PeterDaveHello
    PeterDaveHello committed Aug 14, 2024
    Configuration menu
    Copy the full SHA
    4b538a2 View commit details
    Browse the repository at this point in the history