Description
In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 (with lite vanguards), aka TROVE-2024-003.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | arti | >= 1.2.2, < 1.2.3 | 1.2.3 | GHSA-9328-gcfq-p269 |
| crates.io | tor-circmgr | >= 0.18.0, < 0.18.1 | 0.18.1 | GHSA-9328-gcfq-p269 |