pypi package report

Is starkbank-ecdsa safe?

2 known vulnerabilities, worst severity CRITICAL.

cvss

9.0

how bad it is if exploited, out of 10

epss

1.2%

chance of exploitation in the next 30 days

xyz score

4.7

CyberXYZ composite, out of 10

fig. 01 — GHSA-92vm-mxjf-jqf3, the advisory selected below

// advisories

GHSA-92vm-mxjf-jqf3

CRITICALCVE-2021-43572

The verify function in the Stark Bank Python ECDSA library (starkbank-ecdsa) 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.

Affected: < 2.0.1
Fixed in: 2.0.1
Weakness: CWE-347
Published: 2021-11-10
Source: github

GHSA NVD MITRE reference reference reference reference

// dependencies

0 direct

// ai model usage

No published models are known to use this package.

Checked 2026-09-22 at 00:52 UTC. The most recent advisory here was published 2021-11-10. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is starkbank-ecdsa safe? pypi package security report | CyberXYZ