Description
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encode_structured_data method
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| eth-account | eth-account | < 0.5.9 | 0.5.9 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | eth-account | < 0.5.9 | 0.5.9 | GHSA-v65g-f3cj-fjp4 |