Skip to content
OpenAdvisories

Vendor

sgbett

3 known vulnerabilities.

Products

bsv-ruby-sdk 2 bsv-sdk 1 bsv-wallet 1 secp256k1-native 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-63410

    secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication

    secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through `Point#mul` or `scalar_multiply_ct` can leak timing information about a secret scalar when compiled by a toolchain …

    sgbett secp256k1-native