CVE-2022-1930 — ReDoS in eth-account encode_structured_data function

CVE-2022-1930

ReDoS in eth-account encode_structured_data function PUBLISHED

Description (CNA)

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encode_structured_data method

Affected (CNA)

Vendor / product	Versions
eth-account / eth-account	affected 0 before 0.5.9

CWE

CWE-1333

References

https://research.jfrog.com/vulnerabilities/eth-account-redos-xray-248681/

ADP enrichment

CVE

No English description supplied.

https://research.jfrog.com/vulnerabilities/eth-account-redos-xray-248681/