Skip to content
OpenAdvisories

Package · Go

github.com/cloudflare/circl

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Low 2.9
    CVE-2026-1229

    Incorrect calculation in CIRCL secp384r1 CombinedMult

    The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed…

    Cloudflare CIRCL rclone github.com/cloudflare/circl Ubuntu Alpine Go
  • Low 3.7
    CVE-2025-8556

    Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results

    A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat OpenShift Container Platform 4 Linux Windows Browsers Debian Ubuntu Go
  • High —
    GHSA-9763-4f94-gfch

    CIRCL's Kyber: timing side-channel (kyberslash2)

    ### Impact On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key. Does not apply to ephemeral usage, such as when used in the regular way in TLS. ### Patches Patched in …

    github.com/cloudflare/circl Go
  • Medium 5.3
    CVE-2023-1732

    Improper random reading in CIRCL

    When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read() returns an error. In rare deployment cases (error thrown by the Read() function), this could lead to a predictable shared secret. …

    Cloudflare CIRCL github.com/cloudflare/circl Go