bitcoinjs tiny-secp256k1

• CVE-2024-49364 High 8.1 tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment 0.4%
• CVE-2024-49365 High 8.1 tiny-secp256k1 allows for verify() bypass when running in bundled environment 0.2%