Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-47931 EUVD-2022-7605GHSA-cvcx-g7wh-x8rfGO-2023-1904

Collision of hash values in github.com/bnb-chain/tss-lib

Published Dec 22, 2022 · Updated Apr 15, 2025 · Assigned by mitre

Package: github.com/binance-chain/tss-lib Package: github.com/bnb-chain/tss-lib Ecosystem: Go

Description

IO FinNet tss-lib before 2.0.0 allows a collision of hash values.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/binance-chain/tss-lib all versions — GO-2023-1904
Go github.com/bnb-chain/tss-lib < 1.3.6-0.20230324145555-bb6fb30bd3eb 1.3.6-0.20230324145555-bb6fb30bd3eb GHSA-cvcx-g7wh-x8rf

References