{"action":"Upgrade fastecdsa to 2.3.2 or later.","affected":[{"fixed":"2.3.2","introduced":"0"}],"component":"fastecdsa","cve_ids":["CVE-2024-21502"],"ecosystem":"PyPI","epss":0.01034,"exploited":false,"fixed_versions":["2.3.2"],"ghsa_id":"GHSA-ph86-g9r3-5qw4","id":"tcs_01M5KFT46YZ8JKF1ZST3143SSH","modified_at":"2025-02-12T22:26:52.677512Z","published_at":"2024-02-24T06:30:17Z","references":["https://osv.dev/vulnerability/GHSA-ph86-g9r3-5qw4","https://nvd.nist.gov/vuln/detail/CVE-2024-21502","https://github.com/AntonKueltz/fastecdsa/commit/57fc5689c95d649dab7ef60cc99ac64589f01e36","https://gist.github.com/keltecc/49da037072276f21b005a8337c15db26","https://github.com/AntonKueltz/fastecdsa","https://github.com/AntonKueltz/fastecdsa/blob/v2.3.1/src/curveMath.c%23L210","https://security.snyk.io/vuln/SNYK-PYTHON-FASTECDSA-6262045"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-ph86-g9r3-5qw4","url":"https://osv.dev/vulnerability/GHSA-ph86-g9r3-5qw4"}],"summary":"Uninitialized Variable in fastecdsa"}