2 matches found
GHSA-92VM-MXJF-JQF3 Improper Verification of Cryptographic Signature in starkbank-ecdsa
The verify function in the Stark Bank Python ECDSA library starkbank-ecdsa 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...
9.8CVSS9.4AI score0.01248EPSS
SaveExploits1References6
CVE-2021-43572: Improper Verification of Cryptographic Signature
The verify function in the Stark Bank Python ECDSA library aka starkbank-escada or ecdsa-python before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...
9.8CVSS6AI score0.01248EPSS
SaveExploits1References2
20