https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:03:29 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1061 certfr-2024-avi-1061 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1061 https://cve.radiocsirt.org/vuln/euvd-2026-258660 EUVD-2026-258660 https://cve.radiocsirt.org/vuln/euvd-2026-258660 https://cve.radiocsirt.org/vuln/fkie_cve-2024-42459 <p>In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended.</p> <p>In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-42459 https://cve.radiocsirt.org/vuln/ghsa-f7q4-pwc6-w24p <p><strong>Affected:</strong> npm: elliptic</p> <p>In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended.</p> <p><strong>Affected:</strong> npm: elliptic</p> <p>In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended.</p> https://cve.radiocsirt.org/vuln/ghsa-f7q4-pwc6-w24p https://cve.radiocsirt.org/vuln/msrc_cve-2024-42459 msrc_CVE-2024-42459 https://cve.radiocsirt.org/vuln/msrc_cve-2024-42459 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14663-1 <p>velociraptor-0.7.0.4.git142.862ef23-1.1 on GA media</p> <p>velociraptor-0.7.0.4.git142.862ef23-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14663-1 https://cve.radiocsirt.org/vuln/rhsa-2024:6209 <p>jose-go: improper handling of highly compressed data axios: axios: Server-Side Request Forgery elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed</p> <p>jose-go: improper handling of highly compressed data axios: axios: Server-Side Request Forgery elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed</p> https://cve.radiocsirt.org/vuln/rhsa-2024:6209 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-42459 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-elliptic, Ubuntu:20.04:LTS: node-elliptic, Ubuntu:22.04:LTS: node-elliptic, Ubuntu:24.04:LTS: node-elliptic, Ubuntu:25.10: node-elliptic, Ubuntu:26.04:LTS: node-elliptic</p> <p>In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-elliptic, Ubuntu:20.04:LTS: node-elliptic, Ubuntu:22.04:LTS: node-elliptic, Ubuntu:24.04:LTS: node-elliptic, Ubuntu:25.10: node-elliptic, Ubuntu:26.04:LTS: node-elliptic</p> <p>In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-42459 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1799 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1799