starkbank/ecdsa-node

starkbank/ecdsa-node

GitHubGitHub
GitHubgithub.com
starkbank.comstarkbank.com
Releases9
Frequency9 months 5 days
Last Release
Stars42
A lightweight and fast pure JS ECDSA library
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-43571↗
9.8 CRITICAL7.5 HIGH

The verify function in the Stark Bank Node.js ECDSA library (ecdsa-node) 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.