npm/starkbank-ecdsa: high
Signature verification vulnerability in Stark Bank ecdsa libraries
Action: Upgrade starkbank-ecdsa to 1.1.3 or later.
npm i starkbank-ecdsa@1.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.2 | 1.1.3 | - |
Fixed versions
| 1.1.3 |
Sources
- osv: GHSA-9wx7-jrvc-28mm#npm/starkbank-ecdsa
- https://github.com/starkbank/ecdsa-python/commit/d136170666e9510eb63c2572551805807bd4c17f
- https://github.com/starkbank/ecdsa-dotnet
- https://github.com/starkbank/ecdsa-java
- https://github.com/starkbank/ecdsa-node
- https://github.com/starkbank/ecdsa-python
- https://github.com/starkbank/ecdsa-python/compare/v2.0.0...v2.0.1
- https://github.com/starkbank/ecdsa-python/releases/tag/v2.0.1
- https://research.nccgroup.com/2021/11/08/technical-advisory-arbitrary-signature-forgery-in-stark-bank-ecdsa-libraries
published · modified · JSON