{"action":"Upgrade fastecdsa to 2.1.2 or later.","affected":[{"fixed":"2.1.2","introduced":"0"}],"component":"fastecdsa","cve_ids":["CVE-2020-12607"],"ecosystem":"PyPI","epss":0.01311,"exploited":false,"fixed_versions":["2.1.2"],"ghsa_id":"GHSA-56wv-2wr9-3h9r","id":"tcs_01M5KGANCXD8YQ975YXYQF980W","modified_at":"2023-11-08T04:02:10.552763Z","published_at":"2020-06-02T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-42","https://github.com/AntonKueltz/fastecdsa/commit/4a16daeaf139be20654ef58a9fe4c79dc030458c","https://github.com/AntonKueltz/fastecdsa/commit/7b64e3efaa806b4daaf73bb5172af3581812f8de","https://github.com/AntonKueltz/fastecdsa/issues/52","https://github.com/AntonKueltz/fastecdsa/commit/e592f106edd5acf6dacedfab2ad16fe6c735c9d1","https://github.com/advisories/GHSA-56wv-2wr9-3h9r"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-42","url":"https://osv.dev/vulnerability/PYSEC-2020-42"}],"summary":"An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1,"}