https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-43572.htmlhttps://patchthecve.com/cve/CVE-2021-43572.htmlWed, 17 Jun 2026 04:11:09 +0000CRITICAL 9.8: The verify function in the Stark Bank Python ECDSA library (aka starkbank-escada or ecdsa-python) before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.https://patchthecve.com/cve/CVE-2021-43571.htmlhttps://patchthecve.com/cve/CVE-2021-43571.htmlWed, 17 Jun 2026 04:11:09 +0000CRITICAL 9.8: The verify function in the Stark Bank Node.js ECDSA library (ecdsa-node) 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.https://patchthecve.com/cve/CVE-2021-43570.htmlhttps://patchthecve.com/cve/CVE-2021-43570.htmlWed, 17 Jun 2026 04:11:09 +0000CRITICAL 9.8: The verify function in the Stark Bank Java ECDSA library (ecdsa-java) 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.https://patchthecve.com/cve/CVE-2021-43569.htmlhttps://patchthecve.com/cve/CVE-2021-43569.htmlWed, 17 Jun 2026 04:11:09 +0000CRITICAL 9.8: The verify function in the Stark Bank .NET ECDSA library (ecdsa-dotnet) 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.https://patchthecve.com/cve/CVE-2021-43568.htmlhttps://patchthecve.com/cve/CVE-2021-43568.htmlWed, 17 Jun 2026 04:11:09 +0000CRITICAL 9.8: The verify function in the Stark Bank Elixir ECDSA library (ecdsa-elixir) 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.