CVE Intelligence

Vulnerabilidades do Go Github.com/cloudflare/circl

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Go Github.com/cloudflare/circl: 1 registro(s), com versões afetadas e correções.

CVE-2025-8556 Baixa · 3.7 CWE-1287 06/08/2025
Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results
A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.