CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.