crates.io/hd-wallet: medium
`Slip10Like` derivation method instantiated with certain curves may allow attacker to find derivation path which results into very long derivation (possible DoS)
Action: Upgrade hd-wallet to 0.6.0 or later.
cargo update -p hd-wallet --precise 0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-2ff4-xfpr-m32r
- https://github.com/LFDT-Lockness/hd-wallet/security/advisories/GHSA-2ff4-xfpr-m32r
- https://github.com/LFDT-Lockness/hd-wallet/commit/a7e37704600ee7c737dbb02db08814dd2d15389d
- https://github.com/LFDT-Lockness/hd-wallet
published · modified · JSON