crates.io/slip-10: medium
`Slip10Like` derivation method instantiated with certain curves may allow attacker to find derivation path which results into very long derivation (possible DoS)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.4.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-2ff4-xfpr-m32r#crates.io/slip-10
- https://github.com/LFDT-Lockness/hd-wallet/security/advisories/GHSA-2ff4-xfpr-m32r
- https://github.com/LFDT-Lockness/hd-wallet/commit/a7e37704600ee7c737dbb02db08814dd2d15389d
- https://github.com/LFDT-Lockness/hd-wallet
published · modified · JSON