—
GO-2023-1732
Timing attack from non-constant time scalar multiplication in github.com/bnb-chain/tss-lib
Quick fix
GO-2023-1732 — github.com/bnb-chain/tss-lib: upgrade to the fixed version with the command below.
go get github.com/bnb-chain/tss-lib@v1.3.6-0.20230324145555-bb6fb30bd3ebDetails
Timing attack from non-constant time scalar multiplication in github.com/bnb-chain/tss-lib.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/bnb-chain/tss-lib
Introduced in:
0Fixed in: 1.3.6-0.20230324145555-bb6fb30bd3ebFix
go get github.com/bnb-chain/tss-lib@v1.3.6-0.20230324145555-bb6fb30bd3ebGo/github.com/binance-chain/tss-lib
Introduced in:
0No fixed version published yet for github.com/binance-chain/tss-lib (go modules). Pin to a known-safe version or switch to an alternative.