StableLib Ed25519 Signature Malleability via Missing S < L Check

Description

No description available.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 2.0.2

References

• GHSA-x3ff-w252-2g7j
• CWE-347
• OWASP 2021-A2

Related Issues

• Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry - Vulnerability
• Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler - CVE-2025-27098
• StudioCMS S3 Storage Manager Authorization Bypass via Missing `await` on Async Auth Check - CVE-2026-32101
• @stablelib/cbor: Prototype poisoning via `__proto__` map keys in CBOR decoding - Vulnerability

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@stablelib/ed25519