CRITICAL9.1PyPI
GHSA-8qxj-f9rh-9fg2· CVE-2019-14859, PYSEC-2020-163Improper Verification of Cryptographic Signature in Pure-Python ECDSA
Modified: 2/21/2025
package
PyPI/ecdsa
pkg:pypi/ecdsa
MEDIUM5.3PyPI
GHSA-9f5j-8jwj-x28g· CVE-2026-33936, PYSEC-2026-2467python-ecdsa: Denial of Service via improper DER length validation in crafted private keys
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-pwfw-mgfj-7g3g· CVE-2019-14853, GHSA-2mrj-435v-c2crecdsa Denial of Service vulnerability in signature verification and signature malleability
Modified: 9/20/2024
HIGH7.4PyPI
GHSA-wj6h-64fc-37mp· CVE-2024-23342, PYSEC-2026-1325Minerva timing attack on P-256 in python-ecdsa
Modified: 9/10/2026
—PyPI
PYSEC-2019-177· CVE-2019-14853, GHSA-2mrj-435v-c2crModified: 11/8/2023
—PyPI
PYSEC-2020-163· CVE-2019-14859, GHSA-8qxj-f9rh-9fg2Modified: 11/8/2023
HIGH7.4PyPI
PYSEC-2026-1325· CVE-2024-23342, GHSA-wj6h-64fc-37mpMinerva timing attack on P-256 in python-ecdsa
Modified: 7/7/2026
MEDIUM5.3PyPI
PYSEC-2026-2467· CVE-2026-33936, GHSA-9f5j-8jwj-x28gpython-ecdsa: Denial of Service via improper DER length validation in crafted private keys
Modified: 7/13/2026