CVE-2024-42461

CVE-2024-42461 is a critical vulnerability affecting the Elliptic package 6.5.6 for Node.js, specifically due to ECDSA signature malleability caused by allowing BER-encoded signatures. This flaw carries a CVSS score of 9.1, indicating a severe impact with high confidentiality and integrity compromise potential, and can be exploited remotely with low attack complexity. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.