ecdsa vulnerabilities
CVEs whose affected-version data names the ecdsa package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-33936Medium· 5.3PoCpython-ecdsa: Denial of Service via improper DER length validation in crafted private keys
python-ecdsa: Denial of Service via improper DER length validation in crafted private keys
▾ Twilightecdsa · ecdsaEPSS 0.48%via OSV
CVE-2024-23342High· 7.4Minerva timing attack on P-256 in python-ecdsa
Minerva timing attack on P-256 in python-ecdsa
▾ Twilightecdsa · ecdsaEPSS 0.98%via OSV