CVE-2026-26958

CVE-2026-26958 affects filippo.io/edwards25519. In v1.1.0 and earlier, MultiScalarMult can produce invalid results or undefined behavior if the receiver is not the identity point; an initialized non-identity receiver yields an incorrect result, and a zero/uninitialized receiver yields invalid beh...