Go/github.com/kudelskisecurity/crystals-go: unknown
Kyberslash timing attack possible in github.com/kudelskisecurity/crystals-go
Action: Upgrade github.com/kudelskisecurity/crystals-go to 0.0.0-20240116172146-2a6ca2d4e64d or later.
go get github.com/kudelskisecurity/crystals-go@v0.0.0-20240116172146-2a6ca2d4e64dAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20240116172146-2a6ca2d4e64d |
Sources
- osv: GO-2024-2469
- https://github.com/kudelskisecurity/crystals-go/security/advisories/GHSA-f6jh-hvg2-9525
- https://github.com/kudelskisecurity/crystals-go/pull/20
- https://github.com/kudelskisecurity/crystals-go/pull/21
- https://github.com/kudelskisecurity/crystals-go/issues/19
published · modified · JSON