https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:17:09.767710+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-213572 EUVD-2026-213572 2026-10-06T21:17:09.771134+00:00 EUVD-2026-213572 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26556 fkie_cve-2023-26556 2026-10-06T21:17:09.771180+00:00

io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implementation in Go crypto/elliptic, which is not constant time (there is an if statement in a loop). One leak is in ecdsa/keygen/round_2.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)

 https://cve.radiocsirt.org/vuln/ghsa-3w84-4mjc-rjw7 GHSA-3w84-4mjc-rjw7 — IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar multiplication 2026-10-06T21:17:09.771239+00:00

Affected: Go: github.com/bnb-chain/tss-lib, Go: github.com/binance-chain/tss-lib

io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implementation in Go crypto/elliptic, which is not constant time (there is an if statement in a loop). One leak is in ecdsa/keygen/round_2.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)

 https://cve.radiocsirt.org/vuln/gsd-2023-26556 gsd-2023-26556 2026-10-06T21:17:09.771290+00:00 gsd-2023-26556