{"action":"Upgrade github.com/supranational/blst to 0.3.3 or later.","affected":[{"fixed":"0.3.3","introduced":"0.3.0"}],"component":"github.com/supranational/blst","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.3.3"],"ghsa_id":"GHSA-x279-68rr-jp4p","id":"tcs_01M5KFRD60JMQRYN817NS4BPT9","modified_at":"2024-05-20T21:32:00Z","published_at":"2022-10-07T07:25:33Z","references":["https://osv.dev/vulnerability/GHSA-x279-68rr-jp4p","https://github.com/supranational/blst/security/advisories/GHSA-x279-68rr-jp4p","https://github.com/supranational/blst/commit/dd980e7f81397895705c49fcb4f52e485bb45e21","https://github.com/supranational/blst","https://pkg.go.dev/vuln/GO-2022-1053"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-x279-68rr-jp4p","url":"https://osv.dev/vulnerability/GHSA-x279-68rr-jp4p"}],"summary":"Blst vulnerable to incorrect results for some inputs in blst_fp_eucl_inverse function"}