Threats affecting pkg:github/open-eid/libdigidocpp

CVE-2026-103902 is a high-severity vulnerability in DigiDoc's libdigidocpp and related DigiDoc applications for Android and iOS. It involves improper verification of cryptographic signatures, allowing attackers to forge digital signatures that affected DigiDoc software incorrectly validates as legitimate. This flaw affects multiple versions of libdigidocpp, DigiDoc4, DigiDoc Android, and DigiDoc iOS.

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4: from 4.7.0 before 4.8.2; DigiDoc on Android: from 2.7.0 before 2.7.2; DigiDoc on iOS: from 2.8.0 before 2.8.1.