Skip to content

fix: apply CVE-2025-14505 fix, set up mapped fork CI#1

Merged
vavsab merged 3 commits into
masterfrom
fork-setup
Jun 22, 2026
Merged

fix: apply CVE-2025-14505 fix, set up mapped fork CI#1
vavsab merged 3 commits into
masterfrom
fork-setup

Conversation

@vavsab

@vavsab vavsab commented Jun 22, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Applies the security fix from indutny/elliptic#345 (CVE-2025-14505): preserves leading zeros in k-value during ECDSA signing per RFC 6979
  • Renames package to @mapped/elliptic, bumps version to 6.6.2
  • Replaces README with a minimal fork notice pointing back to upstream
  • Adds CI workflow using mapped/action-vtl for versioning + npm publish to @mapped scope

This fork exists only until the upstream PR is merged. The NPM_TOKEN secret needs to be set in the repo settings to enable publishing.

vavsab and others added 3 commits June 22, 2026 13:53
…pped fork

- Apply fix from indutny#345: preserve leading zeros in k-value
  during ECDSA signing (RFC 6979 compliance)
- Add regression tests from PR indutny#345
- Rename package to @mapped/elliptic, bump to 6.6.2
- Replace README with minimal fork notice
- Add CI workflow using mapped/action-vtl for versioning and npm publish

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@vavsab vavsab merged commit d80bc4b into master Jun 22, 2026
2 checks passed
@vavsab vavsab deleted the fork-setup branch June 22, 2026 13:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants