GHSA-x3ff-w252-2g7j
Medium · 5.3CVSS
5.3
EPSS
—
Published
Apr 1, 2026
CISA due date
—
The record
StableLib Ed25519 Signature Malleability via Missing S < L Check
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @stablelib/ed25519 | 0 | No fix |
Related vulnerabilities
- CVE-2026-87947 Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO… CWE-347
- CVE-2026-84918 Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment… CWE-347
- CVE-2026-102271 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102272 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102273 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102268 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102266 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-73784 A potential security vulnerability in HPE IceWall products could be exploited to tamper… CWE-347