{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.0"}],"component":"pallet-evm-precompile-modexp","cve_ids":["CVE-2023-28431"],"ecosystem":"crates.io","epss":0.00873,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fcmm-54jp-7vf6","id":"tcs_01M5KEXCH99GVMD2YV2CM4Q8HX","modified_at":"2024-10-24T21:21:00Z","published_at":"2023-03-21T22:31:30Z","references":["https://osv.dev/vulnerability/GHSA-fcmm-54jp-7vf6","https://github.com/paritytech/frontier/security/advisories/GHSA-fcmm-54jp-7vf6","https://nvd.nist.gov/vuln/detail/CVE-2023-28431","https://github.com/paritytech/frontier/pull/1017","https://github.com/paritytech/frontier/commit/5af12e94d7dfc8a0208a290643a800f55de7b219","https://github.com/polkadot-evm/frontier","https://github.com/rust-num/num-bigint/blob/6f2b8e0fc218dbd0f49bebb8db2d1a771fe6bafa/src/biguint/power.rs#L134"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fcmm-54jp-7vf6","url":"https://osv.dev/vulnerability/GHSA-fcmm-54jp-7vf6"}],"summary":"Frontier's modexp precompile is slow for even modulus"}