EUVD-2013-6234

Malware in sbrugna...

EUVD-2025-7891

Malicious code in bioql PyPI...

EUVD-2024-20958

Malicious code in bioql PyPI...

EUVD-2022-25110

Malicious code in bioql PyPI...

EUVD-2025-22936

Malicious code in bioql PyPI...

EUVD-2022-26194

Malicious code in bioql PyPI...

EUVD-2024-54598

Malicious code in bioql PyPI...

EUVD-2025-7890

Malicious code in bioql PyPI...

EUVD-2023-30071

Malicious code in bioql PyPI...

EUVD-2024-48649

Malicious code in bioql PyPI...

EUVD-2023-44635

Malicious code in bioql PyPI...

EUVD-2023-30069

Malicious code in bioql PyPI...

EUVD-2021-6928

Malicious code in bioql PyPI...

EUVD-2021-8748

Malicious code in bioql PyPI...

Signature Malleability

github.com/consensys/gnark is vulnerable to signature malleability. The vulnerability is due to improper validation of the S value in EdDSA and ECDSA signatures not enforcing 0 ≤ S order, which allows an attacker to create multiple valid signatures for the same public input, potentially enabling...

crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()

...

The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries.

...

ROS-20250827-06

A vulnerability in the pbkdf2 library of the Node.js software platform is related to a flaw in the input data validation mechanism. of input data. Exploitation of the vulnerability could allow an attacker acting remotely to forge a digital signature by sending specially crafted packets...

Linux Distros Unpatched Vulnerability : CVE-2016-1000338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject ext...

CVE-2025-43023

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm DSA...