CVE-2024-42461 is a medium severity vulnerability in the Elliptic package for Node.js versions 5.2.1 up to but not including 6.5.7. It involves ECDSA signature malleability due to acceptance of BER-encoded signatures. This flaw allows signatures to be malleable, which can undermine signature uniqueness and potentially affect cryptographic verification processes. The issue is fixed in version 6.5.7.