{"action":"Upgrade botan to 2.9.0-r0 or later.","affected":[{"fixed":"2.9.0-r0","introduced":"0"}],"component":"botan","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.19","exploited":false,"fixed_versions":["2.9.0-r0"],"id":"tcs_01M5NAP01DAB01SPHEDEW14CK7","modified_at":"2026-10-23T17:24:36.735851624Z","published_at":"2019-03-08T19:29:00.250Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2018-20187","https://security.alpinelinux.org/vuln/CVE-2018-20187"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2018-20187#Alpine:v3.19/botan","url":"https://osv.dev/vulnerability/ALPINE-CVE-2018-20187"}],"summary":"A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely measuring the time taken for ECC key generation may be able to derive information about the high bits of the"}