{"action":"Upgrade github.com/taurusgroup/multi-party-sig to 0.7.0-alpha-2025-01-28 or later.","affected":[{"fixed":"0.7.0-alpha-2025-01-28","introduced":"0"}],"component":"github.com/taurusgroup/multi-party-sig","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.7.0-alpha-2025-01-28"],"ghsa_id":"GHSA-7f6p-phw2-8253","id":"tcs_01M5KF1VGEV1KXZQGKYJJJBG73","modified_at":"2025-01-28T18:06:15Z","published_at":"2024-11-25T15:11:11Z","references":["https://osv.dev/vulnerability/GHSA-7f6p-phw2-8253","https://github.com/taurushq-io/multi-party-sig/security/advisories/GHSA-7f6p-phw2-8253","https://eprint.iacr.org/2018/499.pdf","https://github.com/taurushq-io/multi-party-sig","https://github.com/taurushq-io/multi-party-sig/blob/4d84aafb57b437da1b933db9a265fb7ce4e7c138/internal/ot/extended.go#L188","https://github.com/taurushq-io/multi-party-sig/blob/9e4400fccee89be6195d0a12dd0ed052288d5040/internal/ot/extended.go#L114","https://github.com/taurushq-io/multi-party-sig/tree/otfix"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-7f6p-phw2-8253","url":"https://osv.dev/vulnerability/GHSA-7f6p-phw2-8253"}],"summary":"Taurus multi-party-sig has OT-based ECDSA protocol implementation flaws"}