CVE-2026-1229

Description

CIRCL has an incorrect calculation in secp384r1 CombinedMult in github.com/cloudflare/circl

Affected packages (2)

• Go/github.com/cloudflare/circlfrom 0, < 1.6.3
• Go/github.com/cloudflare/circlfrom 0, < 1.6.3

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-1229
• PATCHhttps://github.com/cloudflare/circl
• WEBhttps://github.com/cloudflare/circl/pull/583
• WEBhttps://github.com/cloudflare/circl/releases/tag/v1.6.3
• WEBhttps://github.com/cloudflare/circl/security/advisories/GHSA-q9hv-hpm4-hj6x