CVE-2021-43571

Name of the Vulnerable Software and Affected Versions Stark Bank Node.js ECDSA library (ecdsa-node) version 1.1.2

Description The verify function in the library fails to check that the signature is non-zero, allowing attackers to forge signatures on arbitrary messages.

Recommendations For version 1.1.2, update to a newer version that includes a fix for this issue, as the current version allows attackers to forge signatures due to the verify function's failure to check for non-zero signatures. At the moment, there is no information about a newer version that contains a fix for this vulnerability.