Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact if an application relied on a single canonical signature.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Elliptic package 输入验证错误漏洞
Vulnerability Description
Elliptic package是一款基于JavaScript的椭圆曲线密码库。 Elliptic package 6.5.2版本（Node.js）中存在安全漏洞。攻击者可利用该漏洞提升权限。
CVSS Information
N/A
Vulnerability Type
N/A