Maven/com.starkbank:ecdsa-java: high
Signature verification vulnerability in Stark Bank ecdsa libraries
Action: Upgrade com.starkbank:ecdsa-java to 1.0.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.1 | - |
Fixed versions
| 1.0.1 |
Sources
- osv: GHSA-9wx7-jrvc-28mm#Maven/com.starkbank:ecdsa-java
- https://github.com/starkbank/ecdsa-python/commit/d136170666e9510eb63c2572551805807bd4c17f
- https://github.com/starkbank/ecdsa-dotnet
- https://github.com/starkbank/ecdsa-java
- https://github.com/starkbank/ecdsa-node
- https://github.com/starkbank/ecdsa-python
- https://github.com/starkbank/ecdsa-python/compare/v2.0.0...v2.0.1
- https://github.com/starkbank/ecdsa-python/releases/tag/v2.0.1
- https://research.nccgroup.com/2021/11/08/technical-advisory-arbitrary-signature-forgery-in-stark-bank-ecdsa-libraries
published · modified · JSON