CVE-2022-1930: Ethereum Eth-Account

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encode_structured_data method

Affected products

• Ethereum Eth-Account: before 0.5.9 (fixed in 0.5.9)

Published 2022-08-22. Last modified 2026-06-17.