CVE-2021-43571

CVE-2021-43571 describes a critical vulnerability in the Stark Bank Node.js ECDSA library (ecdsa-node) version 1.1.2, where the signature verification function fails to check for a non-zero signature, enabling attackers to forge signatures on arbitrary messages. This flaw carries a CVSS score of 9.8 (Critical), indicating a severe risk with network-based exploitation, low attack complexity, and high impacts on confidentiality, integrity, and availability. Despite its critical severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.