AZL-73250 CVE-2020-36843 affecting package ed25519-java for versions less than 0.3.0-1

🗓️ 13 Mar 2025 06:15:34Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Ed25519 Java 0.3.0-1 has signature malleability and lacks unforgeability under chosen messages.

Reporter	Title	Published	Views	Family All 54
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to Improper Verification of Cryptographic Signature in SSHJ (CVE-2020-36843)	18 Jun 202519:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Toolkit is vulnerable to Improper Verification of Cryptographic Signature due to EdDSA (CVE-2020-36843)	30 Sep 202515:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard could allow attackers to create new valid signatures different from previous signatures for a known message CVE-2020-36843	15 Aug 202516:08	–	ibm
CBLMariner	CVE-2020-36843 affecting package ed25519-java for versions less than 0.3.0-1	13 Jan 202601:11	–	cbl_mariner
Chainguard	CVE-2020-36843 vulnerabilities	20 Mar 202504:12	–	cgr
Circl	CVE-2020-36843	13 Mar 202505:44	–	circl
CNNVD	EdDSA-Java 安全漏洞	13 Mar 202500:00	–	cnnvd
CVE	CVE-2020-36843	13 Mar 202500:00	–	cve
Cvelist	CVE-2020-36843	13 Mar 202500:00	–	cvelist
Debian CVE	CVE-2020-36843	13 Mar 202500:00	–	debiancve