CVE-2023-23940

OpenZeppelin Contracts for Cairo is a library for secure smart contract development written in Cairo for StarkNet, a decentralized ZK Rollup. "isvalidethsignature" is missing a call to "finalizekeccak" after calling "verifyethsignature". As a result, any contract using "isvalidethsignature" from...

GHSA-V65G-F3CJ-FJP4 Regular expression denial of service in eth-account

An exponential ReDoS Regular Expression Denial of Service can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encodestructureddata method...