LOW

GHSA-q9hv-hpm4-hj6x

CIRCL has an incorrect calculation in secp384r1 CombinedMult

Quick fix

GHSA-q9hv-hpm4-hj6x — github.com/cloudflare/circl: upgrade to the fixed version with the command below.

go get github.com/cloudflare/circl@v1.6.3

Details

The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected.

The bug was fixed in **[v1.6.3](https://github.com/cloudflare/circl/releases/tag/v1.6.3)**.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/cloudflare/circl

Introduced in: 0Fixed in: 1.6.3

Fixgo get github.com/cloudflare/circl@v1.6.3

References

https://github.com/cloudflare/circl/security/advisories/GHSA-q9hv-hpm4-hj6x[WEB]
https://nvd.nist.gov/vuln/detail/CVE-2026-1229[ADVISORY]
https://github.com/cloudflare/circl/pull/583[WEB]
https://github.com/cloudflare/circl[PACKAGE]
https://github.com/cloudflare/circl/releases/tag/v1.6.3[WEB]