Threats affecting pkg:github/cloudflare/circl

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.9	EPSS 0.4%	CVE-2026-1229Cloudflare CIRCL · Incorrect Calculation Low2.9EPSS 0.4%2026-02-24CVE Database V5CVE-2026-1229 CVE-2026-1229 is a low-severity vulnerability in the Cloudflare CIRCL library affecting the CombinedMult function in the ecc/p384 package for the secp384r1 curve. The function produces incorrect values for certain inputs due to incomplete addition formulas. This issue does not affect ECDH or ECDSA operations relying on this curve. The vulnerability was fixed in version 1.6.3 of CIRCL. EPSS 0.4%Vulnerability CWE-682	CVE Database V5	2026-02-24

Page 1 of 1