René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"python-ecdsa vulnerabilty CVE-2024-23342","articleBody":"The [tlsfuzzer/python-ecdsa](https://github.com/tlsfuzzer/python-ecdsa) library this project uses has a reported vulnerability (CVE-2024-23342), which causes this project to no longer build on NixOS (see romanz/trezor-agent#505 for report of this same issue). \n\n_I realize the nix package isn't official, but I assume it's only a matter of time before other projects also block the python-ecdsa library as well._\n\nAdditionally, the python-ecdsa maintainer has stated that the project shouldn't be used in production in https://github.com/tlsfuzzer/python-ecdsa/issues/330#issuecomment-3333965951\n\n\u003e I don't want people to use this library in production environments...\n\u003e\n\u003e It's a teaching tool, it's a testing tool, it's absolutely not an production grade implementation.\n\ntlsfuzzer/python-ecdsa#330 also links to a bunch more issues in other projects as well.","author":{"url":"https://github.com/DrymarchonShaun","@type":"Person","name":"DrymarchonShaun"},"datePublished":"2025-11-07T07:30:19.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":4},"url":"https://github.com/82/python-onlykey/issues/82"}