Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

tiny-secp256k1 — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in tiny-secp256k1, with AI-generated Chinese analysis, references, and POCs.

Vendor: bitcoinjs

CVE IDTitleCVSSSeverityPublished
CVE-2024-49364 tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment CWE-522 7.5AIHighAI2025-07-01
CVE-2024-49365 tiny-secp256k1 allows for verify() bypass when running in bundled environment CWE-347 5.3AIMediumAI2025-07-01

All 2 known CVE vulnerabilities affecting tiny-secp256k1 with full Chinese analysis, references, and POCs where available.