What’s Vulnerable › Products

bitcoinjs tiny-secp256k1 vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your bitcoinjs tiny-secp256k1 version is affected

Latest bitcoinjs tiny-secp256k1 vulnerabilities

• CVE-2024-49365 — tiny-secp256k1 allows for verify() bypass when running in bundled environment (CVSS 8.1)
• CVE-2024-49364 — tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment (CVSS 8.1)