{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/taurusgroup/multi-party-sig","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7f6p-phw2-8253","id":"tcs_01M5KG63NEJZK89CYXHPG8CSXD","modified_at":"2026-03-03T04:56:02.578799Z","published_at":"2024-11-27T19:16:39Z","references":["https://osv.dev/vulnerability/GO-2024-3288","https://github.com/taurushq-io/multi-party-sig/security/advisories/GHSA-7f6p-phw2-8253","https://eprint.iacr.org/2018/499.pdf","https://github.com/taurushq-io/multi-party-sig/blob/4d84aafb57b437da1b933db9a265fb7ce4e7c138/internal/ot/extended.go#L188","https://github.com/taurushq-io/multi-party-sig/blob/9e4400fccee89be6195d0a12dd0ed052288d5040/internal/ot/extended.go#L114","https://github.com/taurushq-io/multi-party-sig/tree/otfix"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3288","url":"https://osv.dev/vulnerability/GO-2024-3288"}],"summary":"Taurus multi-party-sig has OT-based ECDSA protocol implementation flaws in github.com/taurusgroup/multi-party-sig"}