{"action":"Upgrade paillier-zk to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0.0.0-0"}],"component":"paillier-zk","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-fpr5-jp2j-4q2f","id":"tcs_01M5KF9F1Y7X78B4GJVD6D8NA6","modified_at":"2025-10-28T06:29:24.457960Z","published_at":"2024-07-18T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0391","https://crates.io/crates/paillier-zk","https://rustsec.org/advisories/RUSTSEC-2024-0391.html","https://github.com/dfns/paillier-zk/pull/49"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0391","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0391"}],"summary":"Ambiguous challenge derivation"}