{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/babylonlabs-io/babylon/v2","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xq4h-wqm2-668w","id":"tcs_01M5KGBXB3WBGDXGMMVMAP5738","modified_at":"2026-03-03T04:57:42.015466Z","published_at":"2025-11-25T18:12:18Z","references":["https://osv.dev/vulnerability/GO-2025-4159","https://github.com/babylonlabs-io/babylon/security/advisories/GHSA-xq4h-wqm2-668w","https://github.com/babylonlabs-io/babylon/commit/6e8bdd328a47343fcd7ad98d1b0c7267860b019a","https://bips.dev/322"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2025-4159#Go/github.com/babylonlabs-io/babylon/v2","url":"https://osv.dev/vulnerability/GO-2025-4159"}],"summary":"Babylon's BIP322 signature implementation is not fully compliant to the spec in github.com/babylonlabs-io/babylon"}