https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T00:49:51.635150+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-30182 EUVD-2026-30182 2026-10-05T00:49:51.638286+00:00 EUVD-2026-30182 https://cve.radiocsirt.org/vuln/fkie_cve-2021-38195 fkie_cve-2021-38195 2026-10-05T00:49:51.638319+00:00

An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow.

 https://cve.radiocsirt.org/vuln/ghsa-g4vj-x7v9-h82m GHSA-g4vj-x7v9-h82m — Overflow in libsecp256k1 2026-10-05T00:49:51.638349+00:00

Affected: crates.io: libsecp256k1

An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow.

 https://cve.radiocsirt.org/vuln/gsd-2021-38195 gsd-2021-38195 2026-10-05T00:49:51.638373+00:00 gsd-2021-38195 https://cve.radiocsirt.org/vuln/rustsec-2021-0076 RUSTSEC-2021-0076 — libsecp256k1 allows overflowing signatures 2026-10-05T00:49:51.638385+00:00

Affected: crates.io: libsecp256k1

libsecp256k1 accepts signatures whose R or S parameter is larger than the secp256k1 curve order, which differs from other implementations. This could lead to invalid signatures being verified.

The error is resolved in 0.5.0 by adding a `check_overflow` flag.