Skip to main content
← crates.io

ursa

3 known vulnerabilities (2 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 medium, 1 low
Registry
crates.io

Advisories 3

  • CVE-2024-22192Medium 6.5

    Ursa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders

    Affected: through 0.3.7.

  • CVE-2024-21670Medium 6.5

    CL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential

    Affected: through 0.3.7.

  • Unlinkability broken in ursa when verifiers use malicious keys

    Affected: through 0.3.7.