{"action":"Upgrade starkbank-ecdsa to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"1.3.1"}],"component":"starkbank-ecdsa","cve_ids":[],"ecosystem":"NuGet","exploited":false,"fixed_versions":["1.3.2"],"ghsa_id":"GHSA-9wx7-jrvc-28mm","id":"tcs_01M5N8HKHCVZP5VJR7CKWP8TAS","modified_at":"2024-12-06T05:33:51.827944Z","published_at":"2021-11-08T21:51:18Z","references":["https://osv.dev/vulnerability/GHSA-9wx7-jrvc-28mm","https://github.com/starkbank/ecdsa-python/commit/d136170666e9510eb63c2572551805807bd4c17f","https://github.com/starkbank/ecdsa-dotnet","https://github.com/starkbank/ecdsa-java","https://github.com/starkbank/ecdsa-node","https://github.com/starkbank/ecdsa-python","https://github.com/starkbank/ecdsa-python/compare/v2.0.0...v2.0.1","https://github.com/starkbank/ecdsa-python/releases/tag/v2.0.1","https://research.nccgroup.com/2021/11/08/technical-advisory-arbitrary-signature-forgery-in-stark-bank-ecdsa-libraries"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-9wx7-jrvc-28mm#NuGet/starkbank-ecdsa","url":"https://osv.dev/vulnerability/GHSA-9wx7-jrvc-28mm"}],"summary":"Signature verification vulnerability in Stark Bank ecdsa libraries"}