Vulnerabilities for ecdsa

No release of ecdsa is currently known to be free of vulnerabilities.

Details

• GHSA-9f5j-8jwj-x28g2026-03-27

  python-ecdsa: Denial of Service via improper DER length validation in crafted private keys

  Fixed in: 0.19.2

• GHSA-wj6h-64fc-37mp2024-01-22

  Minerva timing attack on P-256 in python-ecdsa

• GHSA-8qxj-f9rh-9fg22020-04-01

  Improper Verification of Cryptographic Signature in Pure-Python ECDSA

  Fixed in: 0.13.3

• GHSA-pwfw-mgfj-7g3g2019-10-08

  ecdsa Denial of Service vulnerability in signature verification and signature malleability

  Fixed in: 0.13.3