https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:52:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-01481 bdu:2020-01481 https://cve.radiocsirt.org/vuln/bdu:2020-01481 https://cve.radiocsirt.org/vuln/brew-duplicity-cve-2019-14859 <p><strong>Affected:</strong> Homebrew: duplicity</p> <p>A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.</p> <p><strong>Affected:</strong> Homebrew: duplicity</p> <p>A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.</p> https://cve.radiocsirt.org/vuln/brew-duplicity-cve-2019-14859 https://cve.radiocsirt.org/vuln/euvd-2026-56657 EUVD-2026-56657 https://cve.radiocsirt.org/vuln/euvd-2026-56657 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14859 <p>A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.</p> <p>A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-14859 https://cve.radiocsirt.org/vuln/ghsa-8qxj-f9rh-9fg2 <p><strong>Affected:</strong> PyPI: ecdsa</p> <p>A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.</p> <p><strong>Affected:</strong> PyPI: ecdsa</p> <p>A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.</p> https://cve.radiocsirt.org/vuln/ghsa-8qxj-f9rh-9fg2 https://cve.radiocsirt.org/vuln/gsd-2019-14859 gsd-2019-14859 https://cve.radiocsirt.org/vuln/gsd-2019-14859 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2472-1 <p>Security update for python-ecdsa</p> <p>Security update for python-ecdsa</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2472-1 https://cve.radiocsirt.org/vuln/pysec-2020-163 <p><strong>Affected:</strong> PyPI: ecdsa</p> <p>A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.</p> <p><strong>Affected:</strong> PyPI: ecdsa</p> <p>A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.</p> https://cve.radiocsirt.org/vuln/pysec-2020-163 https://cve.radiocsirt.org/vuln/rhsa-2021:4702 <p>python-ecdsa: Unexpected and undocumented exceptions during signature decoding python-ecdsa: DER encoding is not being verified in signatures rubygem-activerecord-session_store: hijack sessions by using timing attacks targeting the session id rake: OS Command Injection via egrep in Rake::FileList guava: local information disclosure via temporary directory created with unsafe permissions PyYAML: incomplete fix for CVE-2020-1747 rubygem-nokogiri: XML external entity injection via Nokogiri::XML::Schema Satellite: Azure compute resource secret_key leak to authenticated users foreman: possible man-in-the-middle in smart_proxy realm_freeipa Satellite: BMC controller credential leak via API python-aiohttp: Open redirect in aiohttp.web_middlewares.normalize_path_middleware rubygem-actionpack: Possible Information Disclosure / Unintended Method Execution in Action Pack rails: Possible Denial of Service vulnerability in Action Dispatch rails: Possible DoS Vulnerability in Action Controller Token Authentication django: potential directory-traversal via uploaded files rubygem-puma: incomplete fix for CVE-2019-16770 allows Denial of Service (DoS) django: Potential directory-traversal via uploaded files rubygem-addressable: ReDoS in templates django: Potential directory traversal via ``admindocs`` python-urllib3: ReDoS in the parsing of authority part of URL django: Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros in IPv4 addresses</p> <p>python-ecdsa: Unexpected and undocumented exceptions during signature decoding python-ecdsa: DER encoding is not being verified in signatures rubygem-activerecord-session_store: hijack sessions by using timing attacks targeting the session id rake: OS Command Injection via egrep in Rake::FileList guava: local information disclosure via temporary directory created with unsafe permissions PyYAML: incomplete fix for CVE-2020-1747 rubygem-nokogiri: XML external entity injection via Nokogiri::XML::Schema Satellite: Azure compute resource secret_key leak to authenticated users foreman: possible man-in-the-middle in smart_proxy realm_freeipa Satellite: BMC controller credential leak via API python-aiohttp: Open redirect in aiohttp.web_middlewares.normalize_path_middleware rubygem-actionpack: Possible Information Disclosure / Unintended Method Execution in Action Pack rails: Possible Denial of Service vulnerability in Action Dispatch rails: Possible DoS Vulnerability in Action Controller Token Authentication django: potential directory-traversal via uploaded files rubygem-puma: incomplete fix for CVE-2019-16770 allows Denial of Service (DoS) django: Potential directory-traversal via uploaded files rubygem-addressable: ReDoS in templates django: Potential directory traversal via ``admindocs`` python-urllib3: ReDoS in the parsing of authority part of URL django: Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros in IPv4 addresses</p> https://cve.radiocsirt.org/vuln/rhsa-2021:4702 https://cve.radiocsirt.org/vuln/suse-su-2019:2891-1 <p>Security update for python-ecdsa</p> <p>Security update for python-ecdsa</p> https://cve.radiocsirt.org/vuln/suse-su-2019:2891-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14859 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: python-ecdsa, Ubuntu:18.04:LTS: python-ecdsa</p> <p>A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: python-ecdsa, Ubuntu:18.04:LTS: python-ecdsa</p> <p>A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14859