EUVD-2022-29652

Malicious code in bioql PyPI...

CVE-2022-24884: Improper Verification of Cryptographic Signature

ecdsautils is a tiny collection of programs used for ECDSA keygen, sign, verify. ecdsaverifypreparelegacy does not check whether the signature values r and s are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge signatures. Requiring multiple...