Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2022-1930

ReDoS in eth-account encode_structured_data function

Description

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encode_structured_data method

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

eth-account eth-account

  • 0 to < 0.5.9affected

References