Vulnerabilities

TI-2026-83447 CVE-2026-63410

Timing leak in secp256k1-native constant-time scalar multiplication

MEDIUM 60

secp256k1-native is a native C secp256k1 implementation for Ruby.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00281 Published 2026-10-30 Fixed in 0.18.0 CWE-1255

TI-2026-28901 CVE-2026-40070 · GHSA-hc36-c89j-5f4j

HIGH 70

BSV Ruby SDK is the Ruby SDK for the BSV blockchain.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00138 Published 2026-04-09 Fixed in 0.8.2, 0.3.4 CWE-347

TI-2026-28900 CVE-2026-40069 · GHSA-9hfr-gw99-8rhx

LOW 39

BSV Ruby SDK is the Ruby SDK for the BSV blockchain.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00276 Published 2026-04-09 Fixed in 0.8.2 CWE-754