Skip to content
OpenAdvisories

Package · Go

github.com/supranational/blst

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    GHSA-8c37-7qx3-4c4p

    Blst has logical error in SigValidate in Go bindings

    ### Impact Blst versions v0.3.0 through 0.3.10 failed to perform a signature group-check if the call to `SigValidate` in the Go bindings was complemented with a check for infinity. Formally speaking, infinity, or the identity element of the elliptic curve gro…

    github.com/supranational/blst Go
  • Medium —
    GHSA-x279-68rr-jp4p

    Blst vulnerable to incorrect results for some inputs in blst_fp_eucl_inverse function

    ### Impact Blst versions v0.3.0 to v0.3.2 can produce the incorrect outputs for some inputs to the blst_fp_eucl_inverse function. This could theoretically result in the creation of an invalid signature from correct inputs. However, fuzzing of higher level fun…

    github.com/supranational/blst Go