Read the docs

Starkbank

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Starkbank records in CISA KEV

No Starkbank vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ecdsa-dotnet 1 record MEDIUM Ecdsa-java 1 record MEDIUM Ecdsa-node 1 record MEDIUM Ecdsa-python 1 record MEDIUM Elixir Ecdsa 1 record MEDIUM

Records

1 record in Ecdsa-python · all components

TI-2021-19461 CVE-2021-43572 · GHSA-92vm-mxjf-jqf3

The verify function in the Stark Bank Python ECDSA library (aka starkbank-escada or…

Priority MEDIUM 45

The verify function in the Stark Bank Python ECDSA library (aka starkbank-escada or ecdsa-python) before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messag…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01248 Published 2021-11-09 Fixed in 2.0.1 CWE-347
Open these records in search →