starkbank/ecdsa-java

starkbank/ecdsa-java

GitHubGitHub
GitHubgithub.com
starkbank.comstarkbank.com
Releases4
Frequency2 years 3 days
Last Release
Stars36
A lightweight and fast pure Java ECDSA library
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-43570↗
9.8 CRITICAL7.5 HIGH

The verify function in the Stark Bank Java ECDSA library (ecdsa-java) 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.