{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"anoncreds-clsignatures","cve_ids":["CVE-2024-21670"],"ecosystem":"crates.io","epss":0.00276,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-r78f-4q2q-hvv4","id":"tcs_01M5KF2ZJS0JD2YBC81TGH9PPM","modified_at":"2026-09-10T03:50:05.091750349Z","published_at":"2024-01-16T21:13:43Z","references":["https://osv.dev/vulnerability/GHSA-r78f-4q2q-hvv4","https://github.com/hyperledger-archives/ursa/security/advisories/GHSA-r78f-4q2q-hvv4","https://nvd.nist.gov/vuln/detail/CVE-2024-21670","https://github.com/hyperledger-archives/ursa"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-r78f-4q2q-hvv4#crates.io/anoncreds-clsignatures","url":"https://osv.dev/vulnerability/GHSA-r78f-4q2q-hvv4"}],"summary":"CL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential"}