CVE-2026-129319: create-ecdh: computeSecret does not validate that the peer public key is on the curve (invalid-curve attack)
create-ecdh is a browserifiable implementation of Node.js crypto.creat ...
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.0.5
Event History
Frequently Asked Questions
Which deployments are affected?
Affected deployments use create-ecdh version 4.0.4 or below through its JavaScript browser.js implementation, such as browser bundles or Node.js environments without a working native crypto.createECDH. Modern Node.js deployments that re-export the native crypto.createECDH implementation are not affected.
What does an attacker need to exploit this issue?
An attacker must be able to submit ECDH public keys to a target that reuses a static private key. Repeated interaction can allow recovery of the private key modulo small factors and potentially the full key through the Chinese Remainder Theorem.
Are Curve25519-based uses exposed to a distinct impact?
Yes. For ed25519 and curve25519, accepted low-order points can force a predictable shared secret, in addition to the invalid-curve or small-subgroup risks.
What version fixes the issue?
Version 4.0.5 fixes the missing peer-public-key validation.