Starkbank

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Starkbank records in CISA KEV

No Starkbank vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ecdsa-dotnet 1 record MEDIUM Ecdsa-java 1 record MEDIUM Ecdsa-node 1 record MEDIUM Ecdsa-python 1 record MEDIUM Elixir Ecdsa 1 record MEDIUM

Records

1 record in Ecdsa-node · all components

TI-2021-19460 CVE-2021-43571 · GHSA-q9q6-f556-gpm7

The verify function in the Stark Bank Node.js ECDSA library (ecdsa-node) 1.1.2 fails to…

MEDIUM 44

The verify function in the Stark Bank Node.js ECDSA library (ecdsa-node) 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01027 Published 2021-11-09 Fixed in 1.1.3 CWE-347

Open these records in search →

Critical	5
High	0
Medium	0
Low	0
No CVSS	0