# CVE-2024-23342: PYSEC-2026-1325 - Minerva timing attack on P-256 in python-ecdsa

Source: https://junglewise.ai/threats/cve-2024-23342-minerva-timing-attack-on-p-256-in-python-ecdsa  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-07  
License: CC BY 4.0 with a link back

CVE-2024-23342 · Severity: low · CVSS 3.1 · Published 2026-07-07

Minerva timing attack on P-256 in python-ecdsa

Technologies: [ecdsa (PyPI)](https://junglewise.ai/threats/technologies/ecdsa). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2024-23342 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-23342 being exploited in the wild.

**How severe is CVE-2024-23342?** Low severity, with a CVSS score of 3.1, published 7 July 2026.

**Which products and versions are affected?** ecdsa (PyPI) ECOSYSTEM:introduced=0.

**Is there a fix for CVE-2024-23342?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2024-23342?** Check whether you run ecdsa (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- ecdsa (PyPI) ECOSYSTEM:introduced=0

## Identifiers

- CVE-2024-23342
- GHSA-wj6h-64fc-37mp
- PYSEC-2026-1325

## Related threats

- [PYSEC-2026-2467 - python-ecdsa: Denial of Service via improper DER length validation in crafted private keys](https://junglewise.ai/threats/cve-2026-33936-python-ecdsa-denial-of-service-via-improper-der-length-validation)
- [Improper Verification of Cryptographic Signature in Pure-Python ECDSA](https://junglewise.ai/threats/cve-2019-14859-improper-verification-of-cryptographic-signature-in-pure-python)
- [PYSEC-2020-182 - A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify…](https://junglewise.ai/threats/pysec-2020-182-a-flaw-was-found-in-all-python-ecdsa-versions-before-0-bee0e6ea)
- [ecdsa Denial of Service vulnerability in signature verification and signature malleability](https://junglewise.ai/threats/cve-2019-14853-python-ecdsa-malformed-signature-denial-of-service)