https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:22:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-14657 bdu:2025-14657 https://cve.radiocsirt.org/vuln/bdu:2025-14657 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0045 certfr-2025-avi-0045 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0045 https://cve.radiocsirt.org/vuln/euvd-2026-261858 EUVD-2026-261858 https://cve.radiocsirt.org/vuln/euvd-2026-261858 https://cve.radiocsirt.org/vuln/fkie_cve-2024-48948 <p>The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve&#39;s base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid.</p> <p>The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve&#39;s base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-48948 https://cve.radiocsirt.org/vuln/ghsa-fc9h-whq2-v747 <p><strong>Affected:</strong> npm: elliptic</p> <p>The Elliptic prior to 6.6.0 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve&#39;s base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid.</p> <p><strong>Affected:</strong> npm: elliptic</p> <p>The Elliptic prior to 6.6.0 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve&#39;s base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid.</p> https://cve.radiocsirt.org/vuln/ghsa-fc9h-whq2-v747 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14433-1 <p>python310-pytest-html-4.1.1-3.1 on GA media</p> <p>python310-pytest-html-4.1.1-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14433-1 https://cve.radiocsirt.org/vuln/suse-su-2024:3771-1 <p>Security update for pgadmin4</p> <p>Security update for pgadmin4</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3771-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-48948 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-elliptic, Ubuntu:20.04:LTS: node-elliptic, Ubuntu:22.04:LTS: node-elliptic, Ubuntu:24.04:LTS: node-elliptic, Ubuntu:25.10: node-elliptic, Ubuntu:26.04:LTS: node-elliptic</p> <p>The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve&#39;s base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-elliptic, Ubuntu:20.04:LTS: node-elliptic, Ubuntu:22.04:LTS: node-elliptic, Ubuntu:24.04:LTS: node-elliptic, Ubuntu:25.10: node-elliptic, Ubuntu:26.04:LTS: node-elliptic</p> <p>The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve&#39;s base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-48948 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3285 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3285