Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Priority LOW 15

The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs.

CVSS 4.0LOW 2.9 Network No auth No interaction EPSS 0.00426 Published 2026-02-24 Fixed in 1.6.3 CWE-682
TI-2023-01625 CVE-2023-1732 · GHSA-2q89-485c-9j2x

Improper random reading in CIRCL

Priority LOW 36

When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read() returns an error.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00386 Published 2023-05-10 Fixed in <1.3.3, 1.3.3 CWE-20