https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:16:10.804711+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-95644 cnvd-2021-95644 2026-10-12T22:16:10.807926+00:00 cnvd-2021-95644 https://cve.radiocsirt.org/vuln/euvd-2026-32554 EUVD-2026-32554 2026-10-12T22:16:10.807954+00:00 EUVD-2026-32554 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43572 fkie_cve-2021-43572 2026-10-12T22:16:10.807968+00:00

The verify function in the Stark Bank Python ECDSA library (aka starkbank-escada or ecdsa-python) before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.

 https://cve.radiocsirt.org/vuln/ghsa-92vm-mxjf-jqf3 GHSA-92vm-mxjf-jqf3 — Improper Verification of Cryptographic Signature in starkbank-ecdsa 2026-10-12T22:16:10.807995+00:00

Affected: PyPI: starkbank-ecdsa

The `verify` function in the Stark Bank Python ECDSA library (starkbank-ecdsa) 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.

 https://cve.radiocsirt.org/vuln/gsd-2021-43572 gsd-2021-43572 2026-10-12T22:16:10.808017+00:00 gsd-2021-43572 https://cve.radiocsirt.org/vuln/pysec-2021-426 PYSEC-2021-426 2026-10-12T22:16:10.808028+00:00

Affected: PyPI: starkbank-ecdsa

The verify function in the Stark Bank Python ECDSA library (ecdsa-python) 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.