{"action":"Upgrade github.com/babylonlabs-io/babylon/v4 to 4.1.0 or later.","affected":[{"fixed":"4.1.0","introduced":"0"}],"component":"github.com/babylonlabs-io/babylon/v4","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["4.1.0"],"ghsa_id":"GHSA-xq4h-wqm2-668w","id":"tcs_01M5KFSKHYKVT0CC8BH2PSNKKR","modified_at":"2025-11-27T08:58:53.478261Z","published_at":"2025-11-24T23:34:18Z","references":["https://osv.dev/vulnerability/GHSA-xq4h-wqm2-668w","https://github.com/babylonlabs-io/babylon/security/advisories/GHSA-xq4h-wqm2-668w","https://github.com/babylonlabs-io/babylon/commit/6e8bdd328a47343fcd7ad98d1b0c7267860b019a","https://bips.dev/322","https://github.com/babylonlabs-io/babylon"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-xq4h-wqm2-668w","url":"https://osv.dev/vulnerability/GHSA-xq4h-wqm2-668w"}],"summary":"Babylon's BIP322 signature implementation is not fully compliant to the spec"}