Executive brief
python-ecdsa: Denial of Service via improper DER length validation in crafted private keys
Affected products
- PyPI ecdsa
Junglewise Threat Intelligence
CVE-2026-33936: PYSEC-2026-2467 - python-ecdsa: Denial of Service via improper DER length validation in crafted private keys
CVE-2026-33936 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: ecdsa (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1325 - Minerva timing attack on P-256 in python-ecdsa
- PYSEC-2020-163 - A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without
- PYSEC-2020-182 - A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without
- PYSEC-2019-177 - An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unex