{"action":"Upgrade bip322 to 0.0.11 or later.","affected":[{"fixed":"0.0.11","introduced":"0.0.6"}],"component":"bip322","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.0.11"],"ghsa_id":"GHSA-5chw-87w3-j9cv","id":"tcs_01M5KFCE71NY3GXYPRA7Z3499A","modified_at":"2026-10-09T08:15:18.366782769Z","published_at":"2026-08-14T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0334","https://crates.io/crates/bip322","https://rustsec.org/advisories/RUSTSEC-2026-0334.html","https://github.com/rust-bitcoin/bip322/commit/e8accbe7d39f48f030e44f333b4796e28f6aad80"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0334","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0334"}],"summary":"BIP-322 address ownership verification bypass for P2WPKH and P2SH-P2WPKH addresses"}