GO-2024-2453

See a problem?
Source
https://pkg.go.dev/vuln/GO-2024-2453
Import Source
https://vuln.go.dev/ID/GO-2024-2453.json
JSON Data
https://api.osv.dev/v1/vulns/GO-2024-2453
Aliases
Published
2024-01-18T23:40:46Z
Modified
2024-05-20T16:03:47Z
Summary
Timing side channel in github.com/cloudflare/circl
Details

Timing side channel in github.com/cloudflare/circl

References

Affected packages

Go / github.com/cloudflare/circl

Package

Name
github.com/cloudflare/circl
View open source insights on deps.dev
Purl
pkg:golang/github.com/cloudflare/circl

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.3.7

Ecosystem specific

{
    "imports": [
        {
            "path": "github.com/cloudflare/circl/pke/kyber/internal/common",
            "symbols": [
                "Poly.CompressTo"
            ]
        }
    ]
}