—
GO-2025-3507
Horcrux Double Sign Possibility in github.com/strangelove-ventures/horcrux
Quick fix
GO-2025-3507 — github.com/strangelove-ventures/horcrux/v3: upgrade to the fixed version with the command below.
go get github.com/strangelove-ventures/horcrux/v3@v3.3.2Details
Horcrux Double Sign Possibility in github.com/strangelove-ventures/horcrux
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/strangelove-ventures/horcrux
Introduced in:
0No fixed version published yet for github.com/strangelove-ventures/horcrux (go modules). Pin to a known-safe version or switch to an alternative.
Go/github.com/strangelove-ventures/horcrux/v3
Introduced in:
0Fixed in: 3.3.2Fix
go get github.com/strangelove-ventures/horcrux/v3@v3.3.2References
- https://github.com/strangelove-ventures/horcrux/security/advisories/GHSA-6wxf-7784-62fp[ADVISORY]
- https://github.com/strangelove-ventures/horcrux/commit/fb49be9baed30942b81b42da2b4f7040a2a83c02[FIX]
- https://github.com/strangelove-ventures/horcrux/pull/169[FIX]
- https://github.com/strangelove-ventures/horcrux/releases/tag/v3.3.2[WEB]