tocsin

CVE-2024-22192

2 advisories.

crates.io/ursa CVE-2024-22192: medium 6.5

Ursa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-0.3.7

Fixed versions

No fixed version in the source.

Sources

CVE-2024-22192 · published · modified · JSON

crates.io/anoncreds-clsignatures CVE-2024-22192: medium 6.5

Ursa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders

Action: Upgrade anoncreds-clsignatures to 0.1.0 or later.

cargo update -p anoncreds-clsignatures --precise 0.1.0

Affected

introducedfixedlast affected
00.1.0-

Fixed versions

0.1.0

Sources

CVE-2024-22192 · published · modified · JSON