PT-2021-23873

Name of the Vulnerable Software and Affected Versions Stark Bank Elixir ECDSA library ecdsa-elixir version 1.0.0 ecdsa-python versions prior to 2.0.1 ecdsa-java versions prior to 1.0.1 ecdsa-dotnet versions prior to 1.3.2 ecdsa-node versions prior to 1.1.3 Description The verify function in the...

GHSA-9WX7-JRVC-28MM Signature verification vulnerability in Stark Bank ecdsa libraries

An attacker can forge signatures on arbitrary messages that will verify for any public key. This may allow attackers to authenticate as any user within the Stark Bank platform, and bypass signature verification needed to perform operations on the platform, such as send payments and transfer funds...