{"action":"Upgrade com.starkbank:ecdsa-java to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"1.0.0"}],"component":"com.starkbank:ecdsa-java","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-9wx7-jrvc-28mm","id":"tcs_01M5N8HKCNXMAD02YK69B76221","modified_at":"2024-12-06T05:33:51.827944Z","published_at":"2021-11-08T21:51:18Z","references":["https://osv.dev/vulnerability/GHSA-9wx7-jrvc-28mm","https://github.com/starkbank/ecdsa-python/commit/d136170666e9510eb63c2572551805807bd4c17f","https://github.com/starkbank/ecdsa-dotnet","https://github.com/starkbank/ecdsa-java","https://github.com/starkbank/ecdsa-node","https://github.com/starkbank/ecdsa-python","https://github.com/starkbank/ecdsa-python/compare/v2.0.0...v2.0.1","https://github.com/starkbank/ecdsa-python/releases/tag/v2.0.1","https://research.nccgroup.com/2021/11/08/technical-advisory-arbitrary-signature-forgery-in-stark-bank-ecdsa-libraries"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-9wx7-jrvc-28mm#Maven/com.starkbank:ecdsa-java","url":"https://osv.dev/vulnerability/GHSA-9wx7-jrvc-28mm"}],"summary":"Signature verification vulnerability in Stark Bank ecdsa libraries"}