GHSA-v65g-f3cj-fjp4
Regular expression denial of service in eth-account
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| PyPI | eth-account | < 0.5.9 | 0.5.9 |
Details
As written in the advisory (Markdown source, shown as plain text).
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encode_structured_data method
References
External links from the advisory. They lead to third-party sites.