Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: tlsfuzzer Component: Ecdsa Clear all filters
TI-2026-26287 CVE-2026-33936 · GHSA-9f5j-8jwj-x28g

python-ecdsa: Denial of Service via improper DER length validation in crafted private keys

Priority MEDIUM 63

The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECD…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00485 Published 2026-03-27 Partial fix · 0.19.2 CWE-130
TI-2024-15443 CVE-2024-23342 · GHSA-wj6h-64fc-37mp

python-ecdsa vulnerable to Minerva attack on P-256

Priority HIGH 68

The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECD…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00985 Published 2024-01-22 Partial fix CWE-203