medium5.9
CVE-2022-1930
Regular expression denial of service in eth-account
Impact
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encode_structured_data method
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | eth-account | < 0.5.9 | 0.5.9 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ethereum | Eth-Account | before 0.5.9 |