Skip to content
OpenAdvisories

Package · crates.io

bsv-rs

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    GHSA-cwxv-4866-5gq2

    Shamir backup recovery accepts a share at x = 0, so a supplied share can substitute the recovered private key

    `KeyShares::from_backup_format` (the Shamir backup share reader, public since 0.2.0, the crate's first release) accepted a share whose x coordinate is 0, and `KeyShares::recover_private_key` interpolates the shares at x = 0 to recover the key. At an x of 0 th…

    bsv-rs crates.io