PyPI/fastecdsa CVE-2020-12607: high 7.5, EPSS 1.31%

Improper Verification of Cryptographic Signature in fastecdsa

Action: Upgrade fastecdsa to 2.1.2 or later.

pip install fastecdsa==2.1.2

Affected

Fixed versions

Sources

• osv: GHSA-56wv-2wr9-3h9r
• https://nvd.nist.gov/vuln/detail/CVE-2020-12607
• https://github.com/AntonKueltz/fastecdsa/issues/52
• https://github.com/AntonKueltz/fastecdsa/commit/4a16daeaf139be20654ef58a9fe4c79dc030458c
• https://github.com/AntonKueltz/fastecdsa/commit/7b64e3efaa806b4daaf73bb5172af3581812f8de
• https://github.com/AntonKueltz/fastecdsa/commit/e592f106edd5acf6dacedfab2ad16fe6c735c9d1
• https://github.com/AntonKueltz/fastecdsa
• https://github.com/advisories/GHSA-56wv-2wr9-3h9r
• https://github.com/pypa/advisory-database/tree/main/vulns/fastecdsa/PYSEC-2020-42.yaml

CVE-2020-12607 · published 2021-10-12T16:30:37Z · modified 2025-02-12T18:54:35.292885Z · JSON