tiny-secp256k1 vulnerabilities (npm)

2 vulnerabilities.

• tiny-secp256k1 npm tiny-secp256k1 allows for verify() bypass when running in bundled environment CVE-2024-49365 Fix available 8.1 HighJune 30, 2025
• tiny-secp256k1 npm tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment CVE-2024-49364 Fix available 8.1 HighJune 30, 2025