p PatchFirst

CVE-2026-4258

CVE-2026-4258

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.ecc.basicKey.publicKey(). An attacker can recover a victim's ECDH private key by sending crafted off-curve public keys and observing ECDH outputs. The dhJavaEc() function directly returns the raw x-coordinate of the scalar multiplication result (no hashing), providing a plaintext oracle without requiring any decryption feedback.

CVSS 8.7 · High · EPSS 0.3% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • sjcl

    Versions
    • ≥ 0, < 1.0.9: Affected (semver)

    Update to 1.0.9

  • org.webjars.npm:sjcl

    Versions
    • ≥ 0: Affected (semver)

    No fix published

  • sjcl npm

    Affected ranges
    • SEMVER: < 1.0.9

    Update to 1.0.9

Original sources

Check your server →