Vulnerability Report: GO-2022-1053
- GHSA-x279-68rr-jp4p
- Affects: github.com/supranational/blst
- Published: Oct 18, 2022
- Modified: Jun 12, 2023
Potential creation of an invalid signature from correct inputs. Some inputs to the blst_fp_eucl_inverse function can produce incorrect outputs. This could theoretically permit the creation of an invalid signature from correct inputs.
For detailed information about this vulnerability, visit https://github.com/advisories/GHSA-x279-68rr-jp4p.
Affected Packages
-
PathVersionsSymbols
-
from v0.3.0 before v0.3.3all symbols
Aliases
References
- https://github.com/advisories/GHSA-x279-68rr-jp4p
- https://github.com/supranational/blst/commit/dd980e7f81397895705c49fcb4f52e485bb45e21
- https://vuln.go.dev/ID/GO-2022-1053.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.