Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 14:16:24 +0000 EUVD-2026-213570 https://cve.radiocsirt.org/vuln/euvd-2026-213570 EUVD-2026-213570 https://cve.radiocsirt.org/vuln/euvd-2026-213570 fkie_cve-2023-26557 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26557 <p>io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, which is not constant time for Cmp, modular exponentiation, or modular inverse. An example leak is in crypto/paillier/paillier.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)</p> <p>io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, which is not constant time for Cmp, modular exponentiation, or modular inverse. An example leak is in crypto/paillier/paillier.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26557 GHSA-mjqv-xhgm-gx8c — IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar arithmetic https://cve.radiocsirt.org/vuln/ghsa-mjqv-xhgm-gx8c <p><strong>Affected:</strong> Go: github.com/bnb-chain/tss-lib, Go: github.com/binance-chain/tss-lib</p> <p>io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, which is not constant time for Cmp, modular exponentiation, or modular inverse. An example leak is in crypto/paillier/paillier.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)</p> <p><strong>Affected:</strong> Go: github.com/bnb-chain/tss-lib, Go: github.com/binance-chain/tss-lib</p> <p>io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, which is not constant time for Cmp, modular exponentiation, or modular inverse. An example leak is in crypto/paillier/paillier.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)</p> https://cve.radiocsirt.org/vuln/ghsa-mjqv-xhgm-gx8c gsd-2023-26557 https://cve.radiocsirt.org/vuln/gsd-2023-26557 gsd-2023-26557 https://cve.radiocsirt.org/vuln/gsd-2023-26557