{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.0"}],"component":"mdanter/ecc","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-346h-749j-r28w","id":"tcs_01M5KESHTB9T0NVBZJNV0RKD94","modified_at":"2024-11-28T05:40:55.417547Z","published_at":"2024-04-25T18:31:58Z","references":["https://osv.dev/vulnerability/GHSA-346h-749j-r28w","https://github.com/FriendsOfPHP/security-advisories/blob/master/mdanter/ecc/2024-04-24.yaml","https://github.com/paragonie/phpecc/releases/tag/v2.0.0","https://github.com/phpecc/phpecc"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-346h-749j-r28w","url":"https://osv.dev/vulnerability/GHSA-346h-749j-r28w"}],"summary":"PHPECC vulnerable to multiple cryptographic side-channel attacks"}