Valerini

Name of the Vulnerable Software and Affected Versions: EdDSA-Java (aka ed25519-java) versions 0.3.0 and earlier Description: The implementation of EdDSA in EdDSA-Java exhibits signature malleability and does not satisfy the SUF-CMA property. This allows attackers to create new valid signatures different from previous signatures for a known message. Recommendations: For EdDSA-Java versions 0.3.0 and earlier, consider updating to a version that addresses the signature malleability issue to prevent attackers from creating new valid signatures. At the moment, there is no information about a newer version that contains a fix for this vulnerability.