crates.io/anoncreds-clsignatures CVE-2024-21670: medium 6.5, EPSS 0.28%
CL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-r78f-4q2q-hvv4#crates.io/anoncreds-clsignatures
- https://github.com/hyperledger-archives/ursa/security/advisories/GHSA-r78f-4q2q-hvv4
- https://nvd.nist.gov/vuln/detail/CVE-2024-21670
- https://github.com/hyperledger-archives/ursa
CVE-2024-21670 · published · modified · JSON