It looks like elliptic is not going to address the low severity vuln. Even if it doesn't affect this SDK, it would beneficial to consider options.
Something we could consider, if it doesn't break backward compatibility whatsoever with tokens could be https://github.com/paulmillr/noble-curves. There's a shim that can help as well: https://github.com/soatok/elliptic-to-noble.
Let's weigh our options, including patching elliptic.
It looks like elliptic is not going to address the low severity vuln. Even if it doesn't affect this SDK, it would beneficial to consider options.
Something we could consider, if it doesn't break backward compatibility whatsoever with tokens could be https://github.com/paulmillr/noble-curves. There's a shim that can help as well: https://github.com/soatok/elliptic-to-noble.
Let's weigh our options, including patching elliptic.