[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-48948":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T16:22:42.503Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":37,"duplicate_of":9,"upstream":39,"downstream":40,"duplicates":55,"related":56,"reserved_at":9,"published_at":62,"modified_at":63,"state":64,"summary":65,"references_raw":73,"kevs":117,"epss":118,"epss_history":121,"metrics":398,"affected":411},"CVE-2024-48948","The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve's base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","weakness","Draft","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-463","Padding Oracle Crypto Attack",[],{"id":24,"name":25,"techniques":26},"CAPEC-475","Signature Spoofing by Improper Validation",[],[28],{"_key":29,"name":30,"source":31,"url":32,"maturity":33,"reliability_score":34,"verified":35,"type":9,"platforms":36,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_INDUTNY_ELLIPTIC","Elliptic","github","https://github.com/indutny/elliptic/issues/321","poc",0.3,false,[],[38],"GHSA-fc9h-whq2-v747",[],[41,43,45,47,49,51,53],{"_key":42},"OPENSUSE-SU-2024:14433-1",{"_key":44},"SUSE-SU-2024:3771-1",{"_key":46},"SUSE-SU-2025:3744-1",{"_key":48},"OPENSUSE-SU-2025:14663-1",{"_key":50},"UBUNTU-CVE-2024-48948",{"_key":52},"DEBIAN-CVE-2024-48948",{"_key":54},"OPENSUSE-SU-2026:11220-1",[],[57,58,59,60,61],{"_key":42},{"_key":44},{"_key":46},{"_key":48},{"_key":54},"2024-10-15T00:00:00.000Z","2025-11-25T15:41:32.403Z","Modified",{"cisa_kev":35,"cisa_ransomware":35,"cisa_vendor":9,"epss_severity":66,"epss_score":67,"severity":68,"severity_score":69,"severity_version":70,"severity_source":71,"severity_vector":72,"severity_status":64},"low",0.00556,"medium",4.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",[74,83,86,90,95,100,104,108,113],{"url":75,"sources":76,"tags":79},"https://github.com/indutny/elliptic/pull/322",[71,77,78],"nvd","osv_npm",[80,81,82],"Exploit","Issue Tracking","WEB",{"url":32,"sources":84,"tags":85},[71,77,78],[80,81,82],{"url":87,"sources":88,"tags":89},"https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/",[71,77],[],{"url":91,"sources":92,"tags":93},"https://security.netapp.com/advisory/ntap-20241220-0004/",[71,77],[94],"Third Party Advisory",{"url":96,"sources":97,"tags":98},"https://nvd.nist.gov/vuln/detail/CVE-2024-48948",[78],[99],"Advisory",{"url":101,"sources":102,"tags":103},"https://github.com/indutny/elliptic/commit/34c853478cec1be4e37260ed2cb12cdbdc6402cf",[78],[82],{"url":105,"sources":106,"tags":107},"https://blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof",[78],[82],{"url":109,"sources":110,"tags":111},"https://github.com/indutny/elliptic",[78],[112],"PACKAGE",{"url":114,"sources":115,"tags":116},"https://security.netapp.com/advisory/ntap-20241220-0004",[78],[82],[],{"date":119,"score":67,"percentile":120},"2026-07-06",0.42351,[122,126,129,132,135,138,141,144,147,150,153,156,159,162,165,169,172,175,179,182,186,189,192,195,199,202,205,208,211,214,217,220,223,225,228,231,234,237,240,243,246,249,252,255,258,262,265,267,270,273,276,279,282,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,331,334,337,340,343,346,349,352,355,359,362,365,368,371,374,377,380,383,386,389,392,395],{"date":123,"score":124,"percentile":125},"2025-11-04",0.00073,0.22473,{"date":127,"score":124,"percentile":128},"2025-11-05",0.22465,{"date":130,"score":124,"percentile":131},"2025-11-06",0.2247,{"date":133,"score":124,"percentile":134},"2025-11-07",0.22484,{"date":136,"score":124,"percentile":137},"2025-11-08",0.22493,{"date":139,"score":124,"percentile":140},"2025-11-09",0.22445,{"date":142,"score":124,"percentile":143},"2025-11-10",0.22373,{"date":145,"score":124,"percentile":146},"2025-11-11",0.22401,{"date":148,"score":124,"percentile":149},"2025-11-12",0.2246,{"date":151,"score":124,"percentile":152},"2025-11-13",0.22469,{"date":154,"score":124,"percentile":155},"2025-11-14",0.22463,{"date":157,"score":124,"percentile":158},"2025-11-15",0.22451,{"date":160,"score":124,"percentile":161},"2025-11-16",0.22394,{"date":163,"score":124,"percentile":164},"2025-11-17",0.22357,{"date":166,"score":167,"percentile":168},"2025-11-18",0.0014,0.28618,{"date":170,"score":167,"percentile":171},"2025-11-19",0.28643,{"date":173,"score":167,"percentile":174},"2025-11-20",0.28661,{"date":176,"score":177,"percentile":178},"2025-11-21",0.00079,0.23827,{"date":180,"score":124,"percentile":181},"2025-11-22",0.22322,{"date":183,"score":184,"percentile":185},"2025-11-23",0.00116,0.30947,{"date":187,"score":184,"percentile":188},"2025-11-24",0.30921,{"date":190,"score":184,"percentile":191},"2025-11-25",0.30914,{"date":193,"score":184,"percentile":194},"2025-11-26",0.30913,{"date":196,"score":197,"percentile":198},"2025-11-27",0.00119,0.3147,{"date":200,"score":197,"percentile":201},"2025-11-28",0.31451,{"date":203,"score":197,"percentile":204},"2025-11-29",0.31435,{"date":206,"score":197,"percentile":207},"2025-11-30",0.31414,{"date":209,"score":197,"percentile":210},"2025-12-01",0.31492,{"date":212,"score":197,"percentile":213},"2025-12-02",0.31521,{"date":215,"score":197,"percentile":216},"2025-12-03",0.3152,{"date":218,"score":197,"percentile":219},"2025-12-04",0.31421,{"date":221,"score":197,"percentile":222},"2025-12-05",0.31458,{"date":224,"score":197,"percentile":222},"2025-12-06",{"date":226,"score":197,"percentile":227},"2025-12-07",0.3143,{"date":229,"score":197,"percentile":230},"2025-12-08",0.31443,{"date":232,"score":197,"percentile":233},"2025-12-09",0.31498,{"date":235,"score":184,"percentile":236},"2025-12-10",0.31036,{"date":238,"score":184,"percentile":239},"2025-12-11",0.31063,{"date":241,"score":184,"percentile":242},"2025-12-12",0.31094,{"date":244,"score":184,"percentile":245},"2025-12-13",0.31083,{"date":247,"score":184,"percentile":248},"2025-12-14",0.31061,{"date":250,"score":184,"percentile":251},"2025-12-15",0.3102,{"date":253,"score":184,"percentile":254},"2025-12-16",0.31042,{"date":256,"score":184,"percentile":257},"2025-12-17",0.31088,{"date":259,"score":260,"percentile":261},"2025-12-18",0.00157,0.37197,{"date":263,"score":260,"percentile":264},"2025-12-19",0.37216,{"date":266,"score":260,"percentile":261},"2025-12-20",{"date":268,"score":260,"percentile":269},"2025-12-21",0.37139,{"date":271,"score":260,"percentile":272},"2025-12-22",0.37117,{"date":274,"score":260,"percentile":275},"2025-12-23",0.37113,{"date":277,"score":260,"percentile":278},"2025-12-24",0.37127,{"date":280,"score":260,"percentile":281},"2025-12-25",0.37186,{"date":283,"score":260,"percentile":284},"2025-12-26",0.37166,{"date":286,"score":260,"percentile":287},"2025-12-27",0.3719,{"date":289,"score":260,"percentile":290},"2025-12-28",0.37086,{"date":292,"score":260,"percentile":293},"2025-12-29",0.37062,{"date":295,"score":260,"percentile":296},"2025-12-30",0.37054,{"date":298,"score":260,"percentile":299},"2025-12-31",0.37116,{"date":301,"score":260,"percentile":302},"2026-01-01",0.37265,{"date":304,"score":260,"percentile":305},"2026-01-02",0.37238,{"date":307,"score":260,"percentile":308},"2026-01-03",0.37226,{"date":310,"score":260,"percentile":311},"2026-01-04",0.37063,{"date":313,"score":260,"percentile":314},"2026-01-05",0.37042,{"date":316,"score":260,"percentile":317},"2026-01-06",0.37049,{"date":319,"score":260,"percentile":320},"2026-01-07",0.37077,{"date":322,"score":260,"percentile":323},"2026-01-08",0.37102,{"date":325,"score":260,"percentile":326},"2026-01-09",0.37094,{"date":328,"score":329,"percentile":330},"2026-01-10",0.00162,0.37661,{"date":332,"score":329,"percentile":333},"2026-01-11",0.37639,{"date":335,"score":329,"percentile":336},"2026-01-12",0.37591,{"date":338,"score":197,"percentile":339},"2026-01-13",0.31515,{"date":341,"score":197,"percentile":342},"2026-01-14",0.31559,{"date":344,"score":197,"percentile":345},"2026-01-15",0.31557,{"date":347,"score":197,"percentile":348},"2026-01-16",0.31581,{"date":350,"score":197,"percentile":351},"2026-01-17",0.31578,{"date":353,"score":197,"percentile":354},"2026-01-18",0.31524,{"date":356,"score":357,"percentile":358},"2026-01-19",0.00122,0.32024,{"date":360,"score":357,"percentile":361},"2026-01-20",0.32009,{"date":363,"score":357,"percentile":364},"2026-01-21",0.31961,{"date":366,"score":357,"percentile":367},"2026-01-22",0.31938,{"date":369,"score":357,"percentile":370},"2026-01-23",0.32002,{"date":372,"score":357,"percentile":373},"2026-01-24",0.32015,{"date":375,"score":357,"percentile":376},"2026-01-25",0.31946,{"date":378,"score":357,"percentile":379},"2026-01-26",0.31857,{"date":381,"score":357,"percentile":382},"2026-01-27",0.31843,{"date":384,"score":357,"percentile":385},"2026-01-28",0.31819,{"date":387,"score":357,"percentile":388},"2026-01-29",0.31776,{"date":390,"score":357,"percentile":391},"2026-01-30",0.31766,{"date":393,"score":357,"percentile":394},"2026-01-31",0.31778,{"date":396,"score":184,"percentile":397},"2026-02-01",0.30736,[399,404,406],{"source":71,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":400,"cvss_v4_0":9},{"baseScore":69,"baseSeverity":401,"vectorString":72,"impactScore":402,"exploitabilityScore":403},"MEDIUM",4.2,5.6,{"source":77,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":405,"cvss_v4_0":9},{"baseScore":69,"baseSeverity":401,"vectorString":72,"impactScore":402,"exploitabilityScore":403},{"source":78,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":407,"cvss_v4_0":408},{"baseScore":69,"baseSeverity":9,"vectorString":72,"impactScore":402,"exploitabilityScore":403},{"baseScore":409,"baseSeverity":9,"vectorString":410,"impactScore":9,"exploitabilityScore":9},2.3,"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",[412,420],{"ecosystem":9,"name":413,"vendor":414,"product":413,"cpe_part":415,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":416},"elliptic","indutny","a",[417],{"version":418,"is_range":35,"range_type":419,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.5.7","cpe",{"ecosystem":421,"name":413,"vendor":421,"product":413,"cpe_part":9,"purl_type":422,"purl_namespace":9,"purl_name":413,"source":9,"versions":423},"Npm","npm",[424],{"version":425,"is_range":426,"range_type":427,"version_start":9,"version_start_type":9,"version_end":428,"version_end_type":429,"fixed_in":9},"lt6_6_0",true,"semver","6.6.0","excluding"]