https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:16:31.826161+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-213570 EUVD-2026-213570 2026-10-06T14:16:31.828738+00:00 EUVD-2026-213570 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26557 fkie_cve-2023-26557 2026-10-06T14:16:31.828769+00:00

io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, which is not constant time for Cmp, modular exponentiation, or modular inverse. An example leak is in crypto/paillier/paillier.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)

 https://cve.radiocsirt.org/vuln/ghsa-mjqv-xhgm-gx8c GHSA-mjqv-xhgm-gx8c — IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar arithmetic 2026-10-06T14:16:31.828800+00:00

Affected: Go: github.com/bnb-chain/tss-lib, Go: github.com/binance-chain/tss-lib

io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, which is not constant time for Cmp, modular exponentiation, or modular inverse. An example leak is in crypto/paillier/paillier.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)

 https://cve.radiocsirt.org/vuln/gsd-2023-26557 gsd-2023-26557 2026-10-06T14:16:31.828827+00:00 gsd-2023-26557