CVE-2022-23806
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.
Published Updated
PatchFirst · Latest vulnerabilities
golang-go.crypto vulnerabilities · Page 2
Vulnerabilities published for golang-go.crypto in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 21
Check your server
Check your installed stack and versions against the current vulnerability feeds.