AZL-47430
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-47430.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-47430
- Upstream
- Published
- 2024-08-02T07:16:10Z
- Modified
- 2026-04-01T05:17:01.828565Z
- Summary
- CVE-2024-42460 affecting package reaper for versions less than 3.1.1-11
- Details
-
In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit of r and s is zero.
- References