Signature Verification Bypass

starkbank-ecdsa is vulnerable to signature verification bypass. The vulnerability exists due to the lack of verification of the public key when sending messages allowing an attacker to bypass signature verification needed to perform operations on the platform...

Signature Verification Bypass

starkbank-ecdsa is vulnerable to signature verification bypass. The vulnerability exists due to the lack of verification of the public key when sending messages allowing an attacker to bypass signature verification needed to perform operations on the platform...

Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Python ECDSA library starkbank-ecdsa 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...