CVE-2024-42460 is a vulnerability in the Elliptic package for Node.js versions from 2.0.0 up to but not including 6.5.7. It involves ECDSA signature malleability due to a missing check on whether the leading bit of the signature components r and s is zero. This flaw can allow malleable signatures, which may affect cryptographic integrity verification.