{"action":"Upgrade github.com/kudelskisecurity/crystals-go to 0.0.0-20240116172146-2a6ca2d4e64d or later.","affected":[{"introduced":"0"}],"component":"github.com/kudelskisecurity/crystals-go","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.0.0-20240116172146-2a6ca2d4e64d"],"ghsa_id":"GHSA-f6jh-hvg2-9525","id":"tcs_01M5KF8FNH1MNVWEM2SFRTRWVA","modified_at":"2024-05-20T22:05:23Z","published_at":"2024-01-17T22:06:20Z","references":["https://osv.dev/vulnerability/GHSA-f6jh-hvg2-9525","https://github.com/kudelskisecurity/crystals-go/security/advisories/GHSA-f6jh-hvg2-9525","https://github.com/kudelskisecurity/crystals-go/issues/19","https://github.com/kudelskisecurity/crystals-go/pull/20","https://github.com/kudelskisecurity/crystals-go/pull/21","https://github.com/kudelskisecurity/crystals-go/commit/2a6ca2d4e64d18dd6e8fbb4e48e22c2510118505","https://github.com/kudelskisecurity/crystals-go","https://kyberslash.cr.yp.to/faq"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-f6jh-hvg2-9525","url":"https://osv.dev/vulnerability/GHSA-f6jh-hvg2-9525"}],"summary":"crystals-go vulnerable to KyberSlash (timing side-channel attack for Kyber)"}