CVE-2024-23342 in python-ecdsa (Minerva)
Sumário
de MITRE • 23/01/2024
The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.
If you want to get best quality of vulnerability data, you may have to visit VulDB.