{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.3.5"}],"component":"github.com/bnb-chain/tss-lib","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h24c-6p6p-m3vx","id":"tcs_01M5KFBPAZSYXP5CHCFGYHWSMW","modified_at":"2023-09-01T20:51:05Z","published_at":"2023-09-01T20:51:05Z","references":["https://osv.dev/vulnerability/GHSA-h24c-6p6p-m3vx","https://github.com/threshold-network/tss-lib/security/advisories/GHSA-h24c-6p6p-m3vx","https://github.com/threshold-network/tss-lib/commit/2e712689cfbeefede15f95a0ec7112227d86f702","https://eprint.iacr.org/2019/114","https://eprint.iacr.org/2021/060","https://github.com/threshold-network/tss-lib"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-h24c-6p6p-m3vx","url":"https://osv.dev/vulnerability/GHSA-h24c-6p6p-m3vx"}],"summary":"tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli"}