Bitcoinjs Tiny-Secp256k1
2 CVEs affecting Bitcoinjs Tiny-Secp256k1. Latest disclosed: 2025-07-01. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-49365 | | 2025-07-01 | tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version 1.1.7, a malicious JSON-stringifyable message can be made passing on verify(), when glob… | |
CVE-2024-49364 | | 2025-07-01 | tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version 1.1.7, a private key can be extracted on signing a malicious JSON-stringifiable object… |