PyPI/postquantum-feldman-vss CVE-2025-29779: medium 5.4, EPSS 0.18%
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.8.0b2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-r8gc-qc2c-c7vh
- nvd: CVE-2025-29779
- https://github.com/DavidOsipov/PostQuantum-Feldman-VSS/security/advisories/GHSA-r8gc-qc2c-c7vh
- https://en.wikipedia.org/wiki/Fault_attack
- https://eprint.iacr.org/2004/100.pdf
- https://github.com/DavidOsipov/PostQuantum-Feldman-VSS
CVE-2025-29779 · published · modified · JSON