3 ms·
(2024). There are other vulnerabilities in that library too. I reported some (with some PRs) https://github.com/indutny/elliptic/pull/338 https://github.com/in
by mmsc 9mo ago
(2024).
There are other vulnerabilities in that library too. I reported some (with some PRs) https://github.com/indutny/elliptic/pull/338 https://github.com/indutny/elliptic/pull/338, https://github.com/indutny/elliptic/pull/337 https://github.com/indutny/elliptic/pull/337, https://github.com/indutny/elliptic/issues/339 https://github.com/indutny/elliptic/issues/339 but I assume they'll never get fixed.
The library is dead and should be marked as vulnerable on npmjs tbh.