Go/github.com/kudelskisecurity/crystals-go: high
crystals-go vulnerable to KyberSlash (timing side-channel attack for Kyber)
Action: Upgrade github.com/kudelskisecurity/crystals-go to 0.0.0-20240116172146-2a6ca2d4e64d or later.
go get github.com/kudelskisecurity/crystals-go@v0.0.0-20240116172146-2a6ca2d4e64dAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20240116172146-2a6ca2d4e64d |
Sources
- osv: GHSA-f6jh-hvg2-9525
- https://github.com/kudelskisecurity/crystals-go/security/advisories/GHSA-f6jh-hvg2-9525
- https://github.com/kudelskisecurity/crystals-go/issues/19
- https://github.com/kudelskisecurity/crystals-go/pull/20
- https://github.com/kudelskisecurity/crystals-go/pull/21
- https://github.com/kudelskisecurity/crystals-go/commit/2a6ca2d4e64d18dd6e8fbb4e48e22c2510118505
- https://github.com/kudelskisecurity/crystals-go
- https://kyberslash.cr.yp.to/faq
published · modified · JSON