{"action":"Upgrade fastecdsa to 2.1.2 or later.","affected":[{"fixed":"2.1.2","introduced":"0"}],"component":"fastecdsa","cve_ids":["CVE-2020-12607"],"ecosystem":"PyPI","epss":0.01311,"exploited":false,"fixed_versions":["2.1.2"],"ghsa_id":"GHSA-56wv-2wr9-3h9r","id":"tcs_01M5KF070HY7PR5NG18KHX7B1C","modified_at":"2025-02-12T18:54:35.292885Z","published_at":"2021-10-12T16:30:37Z","references":["https://osv.dev/vulnerability/GHSA-56wv-2wr9-3h9r","https://nvd.nist.gov/vuln/detail/CVE-2020-12607","https://github.com/AntonKueltz/fastecdsa/issues/52","https://github.com/AntonKueltz/fastecdsa/commit/4a16daeaf139be20654ef58a9fe4c79dc030458c","https://github.com/AntonKueltz/fastecdsa/commit/7b64e3efaa806b4daaf73bb5172af3581812f8de","https://github.com/AntonKueltz/fastecdsa/commit/e592f106edd5acf6dacedfab2ad16fe6c735c9d1","https://github.com/AntonKueltz/fastecdsa","https://github.com/advisories/GHSA-56wv-2wr9-3h9r","https://github.com/pypa/advisory-database/tree/main/vulns/fastecdsa/PYSEC-2020-42.yaml"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-56wv-2wr9-3h9r","url":"https://osv.dev/vulnerability/GHSA-56wv-2wr9-3h9r"}],"summary":"Improper Verification of Cryptographic Signature in fastecdsa"}