Skip to content

Vendor

ecies vulnerabilities

1 published CVE affecting ecies, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of ecies alerts

Products

Latest ecies CVEs

Newest publication first

  1. CVE-2023-49292 Possible private key restoration in go package github.com/ecies/go

    Published
    MediumCVSS 4.8 EPSS 0.34%

    ecies is an Elliptic Curve Integrated Encryption Scheme for secp256k1 in Golang. If funcations Encapsulate(), Decapsulate() and ECDH() could be called by an attacker, they could recover any private key that interacts with it. This vulnerability was patched in 2.0.8. Users are adv...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.