{"action":"Upgrade grandpa-verifier to 0.1.2 or later.","affected":[{"fixed":"0.1.2","introduced":"0"}],"component":"grandpa-verifier","cve_ids":["CVE-2025-24800"],"ecosystem":"crates.io","epss":0.00315,"exploited":false,"fixed_versions":["0.1.2"],"ghsa_id":"GHSA-wwx5-gpgr-vxr7","id":"tcs_01M5KF4B47DSC666BYB0JJM15S","modified_at":"2025-01-28T20:15:50Z","published_at":"2025-01-28T17:29:17Z","references":["https://osv.dev/vulnerability/GHSA-wwx5-gpgr-vxr7","https://github.com/polytope-labs/hyperbridge/security/advisories/GHSA-wwx5-gpgr-vxr7","https://nvd.nist.gov/vuln/detail/CVE-2025-24800","https://github.com/polytope-labs/hyperbridge/pull/372/commits/f0e85db718f5165b06585a49b14a66f8ad643aea","https://github.com/polytope-labs/ismp-substrate/pull/64/commits/04d5be207b082eb61d586d52e1685e2e060347e6#diff-4aedbca82d26bebc03f274e23fd5697c3346ffff54405c87af9018f3aef708b2R1-R160","https://github.com/polytope-labs/ismp-substrate/pull/64/commits/5ca3351a19151f1a439c30d5cbdbfdc72a11f1a8#diff-3835cc24fb2011b3e8246036059acd8c2c2a9a869eedf7a210d18edb6543318dL262","https://github.com/polytope-labs/ismp-substrate/pull/64/commits/b26894913b301061b07db61af841ca2586415f08#diff-493a6129d75fe31185e28695a4d2adc1582fe9df12462e380fe994f170fc1e70L159","https://github.com/polytope-labs/hyperbridge"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-wwx5-gpgr-vxr7#crates.io/grandpa-verifier","url":"https://osv.dev/vulnerability/GHSA-wwx5-gpgr-vxr7"},{"source":"nvd","source_id":"CVE-2025-24800","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24800"}],"summary":"ismp-grandpa crate accepted incorrect signatures"}