CVE-2025-53359

ethereum is a common ethereum structs for Rust. Prior to ethereum crate v0.18.0, signature malleability (according to EIP-2) was only checked for "legacy" transactions, but not for EIP-2930, EIP-1559 and EIP-7702 transactions. This is a specification deviation. The signature malleability itself is not a security issue and not as high of a risk if the ethereum crate is used on a single-implementation blockchain. This issue has been patched in version v0.18.0. A workaround for this issue involves manually checking transaction malleability outside of the crate, however upgrading is recommended.

• CWE-754

• https://github.com/rust-ethereum/ethereum/commit/2dd9d1d5d0936ec7350093ff3a5a7169a349db77
• https://github.com/rust-ethereum/ethereum/pull/67
• https://github.com/rust-ethereum/ethereum/security/advisories/GHSA-3w94-vq2x-v5wr

Published

Jul 2, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53351Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2025-53352Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2025-53354NiceGUI is a Python-based UI framework. Versions 2.24.2 and …6.1
• CVE-2025-53355MCP Server Kubernetes is an MCP Server that can connect to a…7.5
• CVE-2025-53357GLPI, which stands for Gestionnaire Libre de Parc Informatiq…5.4
• CVE-2025-53358kotaemon is an open-source RAG-based tool for document compr…6.5
• CVE-2025-5336The Click to Chat plugin for WordPress is vulnerable to Stor…6.4
• CVE-2025-53360pluginsGLPI's Database Inventory Plugin "manages" the Teclib…4.3
• CVE-2025-53363dpanel is an open source server management panel written in …4.8
• CVE-2025-53364Parse Server is an open source backend that can be deployed …5.3
• CVE-2025-53365The MCP Python SDK, called `mcp` on PyPI, is a Python implem…8.7
• CVE-2025-53366The MCP Python SDK, called `mcp` on PyPI, is a Python implem…8.7