Bitcoinjs vulnerabilities

Products

• Tiny-secp256k1 2

Newest

• bitcoinjs tiny-secp256k1 tiny-secp256k1 allows for verify() bypass when running in bundled environment CVE-2024-49365 Fix available 8.1 HighJune 30, 2025
• bitcoinjs tiny-secp256k1 tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment CVE-2024-49364 Fix available 8.1 HighJune 30, 2025