PyPI ecdsa: denial of service via flawed DER parsing

The ecdsa package on PyPI contains a flaw allowing denial of service via flawed low-level DER parsing.

Published 4sem1 sourceNotable

≈ 19sSpeed

The fact

An attacker can trigger a fatal error by submitting malformed cryptographic data.

Developers using this library should check for a security update.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on June 20, 2026