GitHub Advisoryadvisory · crates.io

GHSA-rm66-9gh4-4gp8 cggmp21 vulnerable to ambiguous challenge derivation

LOW Published 2024-11-12 Modified 2024-11-12 Official page ↗
Ecosystem
crates.io
Packages
cggmp21
Severity
Low
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
Weaknesses
CWE-327
Reviewed
2024-11-12

Affected packages

• crates.io cggmp21: < 0.4.0 → fixed in 0.4.0

Description

Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).

Related

Weakness · CWE (1)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References