Is ecdsa safe to use?

ecdsa has 1 known vulnerabilities on the latest version (0.19.2). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of ecdsa?

The latest version of ecdsa is 0.19.2, released 2026-03-26.

Does ecdsa have known vulnerabilities?

Yes. ecdsa has 1 known vulnerabilities. See depscope.dev/pkg/pypi/ecdsa for details.

No, ecdsa is actively maintained. Latest release: 0.19.2 (2026-03-26).

What are alternatives to ecdsa?

Popular alternatives to ecdsa in PyPI include: packaging, urllib3, requests, typing_extensions, charset-normalizer.

ecdsa

pypiv0.19.2

ECDSA cryptographic signature library (pure python)

License MITpermissive23 versions1 maintainers3 deps13,549,439 weekly dl

http://github.com/tlsfuzzer/python-ecdsa

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Moderate health score (60/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

15/25

maintenance

20/20

popularity

20/25

security

12/15

maturity

5/15

community

0/15

popularity_floor

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2024-23342	Minerva timing attack on P-256 in python-ecdsa	—

OSS Scorecard

OpenSSF security posture score

5.3/10

moderate

Maintainer trust

Active maintainers (3m)

2

Contributors (12m)

3

Primary author dominance

57%

GitHub stars

974

recent ownership change suspected

Quality signals

Download trend

stable(0%)

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (3)

six gmpy;gmpy2;

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/ecdsa