MEDIUM5.3Go
GHSA-2q89-485c-9j2x· CVE-2023-1732, GO-2023-1765Improper random reading in CIRCL
Modified: 9/10/2026
package
Go/github.com/cloudflare/circl
pkg:go/github.com/cloudflare/circl
LOW3.7Go
GHSA-2x5j-vhc8-9cwm· CVE-2025-8556, GO-2025-3754CIRCL-Fourq: Missing and wrong validation can lead to incorrect results
Modified: 9/10/2026
HIGHGo
GHSA-9763-4f94-gfch· GO-2024-2453CIRCL's Kyber: timing side-channel (kyberslash2)
Modified: 9/10/2026
LOWGo
GHSA-q9hv-hpm4-hj6x· CVE-2026-1229, GO-2026-4550CIRCL has an incorrect calculation in secp384r1 CombinedMult
Modified: 9/10/2026
—Go
GO-2023-1765· CVE-2023-1732, GHSA-2q89-485c-9j2xLeaked shared secret and weak blinding in github.com/cloudflare/circl
Modified: 2/4/2026
—Go
GO-2024-2453· GHSA-9763-4f94-gfchTiming side channel in github.com/cloudflare/circl
Modified: 2/4/2026
—Go
GO-2025-3754· CVE-2025-8556, GHSA-2x5j-vhc8-9cwmCIRCL-Fourq: Missing and wrong validation can lead to incorrect results in github.com/cloudflare/circl
Modified: 2/4/2026
—Go
GO-2026-4550· CVE-2026-1229, GHSA-q9hv-hpm4-hj6xCIRCL has an incorrect calculation in secp384r1 CombinedMult in github.com/cloudflare/circl
Modified: 3/9/2026