3 results · Feed
-
Unscored —
libsecp256k1 is unmaintained
The maintainers recommend using [k256](https://crates.io/crates/k256) instead.
-
Critical 9.8
Overflow in libsecp256k1
An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow.
-
High 7.5
libsecp256k1 contains side-channel timing attack
An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust. Scalar::check_overflow allows a timing side-channel attack; consequently, attackers can obtain sensitive information.