Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/11/07 11:44 p.m.28 views

rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency

Impact The vulnerability, known as RUSTSEC-2022-0093, impacts the ed25519-dalek crate, which is a dependency of the rusty-paseto crate. This issue arises from a "Double Public Key Signing Function Oracle Attack" affecting versions of ed25519-dalek prior to v2.0. These versions expose an unsafe AP...

6.5AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder