Vulnerability Report: GO-2024-2469
- GHSA-f6jh-hvg2-9525
- Affects: github.com/kudelskisecurity/crystals-go
- Published: Jan 17, 2024
Kyberslash timing attack possible in github.com/kudelskisecurity/crystals-go
For detailed information about this vulnerability, visit https://github.com/kudelskisecurity/crystals-go/security/advisories/GHSA-f6jh-hvg2-9525.
Affected Packages
-
PathVersionsSymbols
-
before v0.0.0-20240116172146-2a6ca2d4e64d
Aliases
References
- https://github.com/kudelskisecurity/crystals-go/security/advisories/GHSA-f6jh-hvg2-9525
- https://kyberslash.cr.yp.to/faq
- https://github.com/kudelskisecurity/crystals-go/pull/20
- https://github.com/kudelskisecurity/crystals-go/pull/21
- https://github.com/kudelskisecurity/crystals-go/issues/19
- https://vuln.go.dev/ID/GO-2024-2469.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.