{"action":"Upgrade curve25519-dalek to 4.1.3 or later.","affected":[{"fixed":"4.1.3","introduced":"0"}],"component":"curve25519-dalek","cve_ids":["CVE-2024-58262"],"ecosystem":"crates.io","epss":0.00168,"exploited":false,"fixed_versions":["4.1.3"],"ghsa_id":"GHSA-x4gp-pqpj-f43q","id":"tcs_01M5KF4GGD2DP1PAPYMZS2ZJJ3","modified_at":"2026-09-10T03:50:15.886084155Z","published_at":"2024-06-18T21:56:24Z","references":["https://osv.dev/vulnerability/GHSA-x4gp-pqpj-f43q","https://nvd.nist.gov/vuln/detail/CVE-2024-58262","https://github.com/dalek-cryptography/curve25519-dalek/pull/659","https://github.com/dalek-cryptography/curve25519-dalek/commit/415892acf1cdf9161bd6a4c99bc2f4cb8fae5e6a","https://github.com/dalek-cryptography/curve25519-dalek","https://rustsec.org/advisories/RUSTSEC-2024-0344.html"],"severity":{"label":"low","score":2.9},"sources":[{"source":"osv","source_id":"GHSA-x4gp-pqpj-f43q","url":"https://osv.dev/vulnerability/GHSA-x4gp-pqpj-f43q"}],"summary":"curve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`"}