https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:31:22.288150+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-25003 CVE-2019-25003 2026-10-03T02:31:22.308697+00:00

An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust. Scalar::check_overflow allows a timing side-channel attack; consequently, attackers can obtain sensitive information.

 https://cve.radiocsirt.org/vuln/ghsa-hrjm-c879-pp86 GHSA-hrjm-c879-pp86 — libsecp256k1 contains side-channel timing attack 2026-10-03T02:31:22.308749+00:00

Affected: crates.io: libsecp256k1

Versions of libsecp256k1 prior to 0.3.1 did not execute `Scalar::check_overflow` in constant time. This allows an attacker to potentially leak information via a timing attack. The flaw was corrected by modifying `Scalar::check_overflow` to execute in constant time.