{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.8.0b2"}],"component":"postquantum-feldman-vss","cve_ids":["CVE-2025-29780"],"ecosystem":"PyPI","epss":0.0023,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-q65w-fg65-79f4","id":"tcs_01M5KFVFGXKZY4YFKR0YXBE65D","modified_at":"2026-09-10T03:50:23.280196123Z","published_at":"2025-03-14T19:55:10Z","references":["https://osv.dev/vulnerability/GHSA-q65w-fg65-79f4","https://github.com/DavidOsipov/PostQuantum-Feldman-VSS/security/advisories/GHSA-q65w-fg65-79f4","https://nvd.nist.gov/vuln/detail/CVE-2025-29780","https://en.wikipedia.org/wiki/Side-channel_attack","https://github.com/DavidOsipov/PostQuantum-Feldman-VSS","https://www.rambus.com/wp-content/uploads/2015/08/TimingAttacks.pdf"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-q65w-fg65-79f4","url":"https://osv.dev/vulnerability/GHSA-q65w-fg65-79f4"},{"source":"nvd","source_id":"CVE-2025-29780","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29780"}],"summary":"Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations"}