Str4D Ed25519 Java vulnerabilities

1 vulnerability

Known vulnerabilities in Str4D Ed25519 Java, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2020-36843chainguardconductor+63
EPSS score
0.14%
The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability under Chosen Message Attacks) property. This allows attackers to create new valid signatures different from previous signatures for a known message.