[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-1229":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-06T02:55:33.997Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":28,"aliases":29,"duplicate_of":9,"upstream":32,"downstream":33,"duplicates":48,"related":49,"reserved_at":9,"published_at":57,"modified_at":58,"state":59,"summary":60,"references_raw":69,"kevs":97,"epss":98,"epss_history":101,"metrics":372,"affected":387},"CVE-2026-1229","The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas.\nECDH and ECDSA signing relying on this curve are not affected.\n\nThe bug was fixed in  v1.6.3 https://github.com/cloudflare/circl/releases/tag/v1.6.3 .",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-682","Incorrect Calculation","The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.","weakness","Draft","Pillar","High",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-128","Integer Attacks",[],{"id":25,"name":26,"techniques":27},"CAPEC-129","Pointer Manipulation",[],[],[30,31],"GHSA-q9hv-hpm4-hj6x","GO-2026-4550",[],[34,36,38,40,42,44,46],{"_key":35},"OPENSUSE-SU-2026:10313-1",{"_key":37},"SUSE-SU-2026:1042-1",{"_key":39},"OPENSUSE-SU-2026:10486-1",{"_key":41},"OPENSUSE-SU-2026:10613-1",{"_key":43},"MGASA-2026-0147",{"_key":45},"OPENSUSE-SU-2026:10803-1",{"_key":47},"UBUNTU-CVE-2026-1229",[],[50,51,52,53,54,55],{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":45},{"_key":56},"CGA-9996-3FQH-33R8","2026-02-24T07:58:54.406Z","2026-02-24T15:10:21.738Z","Analyzed",{"cisa_kev":61,"cisa_ransomware":61,"cisa_vendor":9,"epss_severity":62,"epss_score":63,"severity":64,"severity_score":65,"severity_version":66,"severity_source":67,"severity_vector":68,"severity_status":59},false,"low",0.00026,"critical",9.8,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[70,78,84,88,93],{"url":71,"sources":72,"tags":75},"https://github.com/cloudflare/circl",[73,67,74],"cve.org","osv_go",[76,77],"Product","PACKAGE",{"url":79,"sources":80,"tags":81},"https://github.com/cloudflare/circl/security/advisories/GHSA-q9hv-hpm4-hj6x",[74],[82,83],"WEB","Advisory",{"url":85,"sources":86,"tags":87},"https://nvd.nist.gov/vuln/detail/CVE-2026-1229",[74],[83],{"url":89,"sources":90,"tags":91},"https://github.com/cloudflare/circl/pull/583",[74],[82,92],"FIX",{"url":94,"sources":95,"tags":96},"https://github.com/cloudflare/circl/releases/tag/v1.6.3",[74],[82],[],{"date":99,"score":63,"percentile":100},"2026-06-05",0.07672,[102,106,109,112,114,117,120,124,128,131,134,137,140,143,146,149,151,154,157,160,163,166,169,172,175,177,180,183,186,189,192,195,198,202,205,208,211,214,217,220,223,226,229,232,235,238,241,244,247,250,253,256,259,262,265,268,270,273,276,279,282,285,288,291,294,297,300,302,305,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351,354,357,360,363,366,369],{"date":103,"score":104,"percentile":105},"2026-02-24",0.00013,0.02004,{"date":107,"score":104,"percentile":108},"2026-02-25",0.01991,{"date":110,"score":104,"percentile":111},"2026-02-26",0.01962,{"date":113,"score":104,"percentile":105},"2026-02-27",{"date":115,"score":104,"percentile":116},"2026-02-28",0.02008,{"date":118,"score":104,"percentile":119},"2026-03-01",0.02017,{"date":121,"score":122,"percentile":123},"2026-03-02",0.00017,0.03953,{"date":125,"score":126,"percentile":127},"2026-03-03",0.0002,0.05115,{"date":129,"score":126,"percentile":130},"2026-03-04",0.04994,{"date":132,"score":126,"percentile":133},"2026-03-05",0.05043,{"date":135,"score":126,"percentile":136},"2026-03-06",0.05015,{"date":138,"score":126,"percentile":139},"2026-03-07",0.05027,{"date":141,"score":126,"percentile":142},"2026-03-08",0.05031,{"date":144,"score":126,"percentile":145},"2026-03-09",0.05007,{"date":147,"score":126,"percentile":148},"2026-03-10",0.05016,{"date":150,"score":126,"percentile":139},"2026-03-11",{"date":152,"score":126,"percentile":153},"2026-03-12",0.0505,{"date":155,"score":126,"percentile":156},"2026-03-13",0.05054,{"date":158,"score":126,"percentile":159},"2026-03-14",0.05021,{"date":161,"score":126,"percentile":162},"2026-03-15",0.05008,{"date":164,"score":126,"percentile":165},"2026-03-16",0.05005,{"date":167,"score":126,"percentile":168},"2026-03-17",0.04997,{"date":170,"score":126,"percentile":171},"2026-03-18",0.05001,{"date":173,"score":126,"percentile":174},"2026-03-19",0.05024,{"date":176,"score":126,"percentile":174},"2026-03-20",{"date":178,"score":126,"percentile":179},"2026-03-21",0.05228,{"date":181,"score":126,"percentile":182},"2026-03-22",0.05221,{"date":184,"score":126,"percentile":185},"2026-03-23",0.05223,{"date":187,"score":126,"percentile":188},"2026-03-24",0.05204,{"date":190,"score":126,"percentile":191},"2026-03-25",0.05245,{"date":193,"score":126,"percentile":194},"2026-03-26",0.05284,{"date":196,"score":126,"percentile":197},"2026-03-27",0.05286,{"date":199,"score":200,"percentile":201},"2026-03-28",0.00022,0.05815,{"date":203,"score":200,"percentile":204},"2026-03-29",0.05808,{"date":206,"score":200,"percentile":207},"2026-03-30",0.05791,{"date":209,"score":200,"percentile":210},"2026-03-31",0.05754,{"date":212,"score":200,"percentile":213},"2026-04-01",0.05761,{"date":215,"score":200,"percentile":216},"2026-04-02",0.05796,{"date":218,"score":200,"percentile":219},"2026-04-03",0.05812,{"date":221,"score":200,"percentile":222},"2026-04-04",0.05831,{"date":224,"score":200,"percentile":225},"2026-04-05",0.05834,{"date":227,"score":200,"percentile":228},"2026-04-06",0.05811,{"date":230,"score":200,"percentile":231},"2026-04-07",0.05825,{"date":233,"score":200,"percentile":234},"2026-04-08",0.05864,{"date":236,"score":200,"percentile":237},"2026-04-09",0.05889,{"date":239,"score":200,"percentile":240},"2026-04-10",0.05882,{"date":242,"score":200,"percentile":243},"2026-04-11",0.05871,{"date":245,"score":200,"percentile":246},"2026-04-12",0.05862,{"date":248,"score":200,"percentile":249},"2026-04-13",0.05854,{"date":251,"score":200,"percentile":252},"2026-04-14",0.05798,{"date":254,"score":200,"percentile":255},"2026-04-15",0.05806,{"date":257,"score":200,"percentile":258},"2026-04-16",0.05819,{"date":260,"score":200,"percentile":261},"2026-04-17",0.05828,{"date":263,"score":200,"percentile":264},"2026-04-18",0.05829,{"date":266,"score":200,"percentile":267},"2026-04-19",0.05814,{"date":269,"score":200,"percentile":204},"2026-04-20",{"date":271,"score":200,"percentile":272},"2026-04-21",0.05981,{"date":274,"score":200,"percentile":275},"2026-04-22",0.05989,{"date":277,"score":200,"percentile":278},"2026-04-23",0.06009,{"date":280,"score":200,"percentile":281},"2026-04-24",0.06011,{"date":283,"score":200,"percentile":284},"2026-04-25",0.06052,{"date":286,"score":200,"percentile":287},"2026-04-26",0.06047,{"date":289,"score":200,"percentile":290},"2026-04-27",0.06039,{"date":292,"score":200,"percentile":293},"2026-04-28",0.06037,{"date":295,"score":200,"percentile":296},"2026-04-29",0.06053,{"date":298,"score":200,"percentile":299},"2026-04-30",0.06057,{"date":301,"score":200,"percentile":299},"2026-05-01",{"date":303,"score":200,"percentile":304},"2026-05-02",0.06086,{"date":306,"score":307,"percentile":308},"2026-05-03",0.00023,0.06314,{"date":310,"score":307,"percentile":311},"2026-05-04",0.06299,{"date":313,"score":307,"percentile":314},"2026-05-05",0.06305,{"date":316,"score":307,"percentile":317},"2026-05-06",0.06331,{"date":319,"score":307,"percentile":320},"2026-05-07",0.06418,{"date":322,"score":307,"percentile":323},"2026-05-08",0.06449,{"date":325,"score":307,"percentile":326},"2026-05-09",0.06493,{"date":328,"score":307,"percentile":329},"2026-05-10",0.06511,{"date":331,"score":307,"percentile":332},"2026-05-11",0.06504,{"date":334,"score":307,"percentile":335},"2026-05-12",0.06515,{"date":337,"score":307,"percentile":338},"2026-05-13",0.0652,{"date":340,"score":307,"percentile":341},"2026-05-14",0.06534,{"date":343,"score":307,"percentile":344},"2026-05-15",0.06539,{"date":346,"score":307,"percentile":347},"2026-05-16",0.0655,{"date":349,"score":307,"percentile":350},"2026-05-17",0.06543,{"date":352,"score":307,"percentile":353},"2026-05-18",0.065,{"date":355,"score":307,"percentile":356},"2026-05-19",0.06469,{"date":358,"score":307,"percentile":359},"2026-05-20",0.06429,{"date":361,"score":307,"percentile":362},"2026-05-21",0.06434,{"date":364,"score":63,"percentile":365},"2026-05-22",0.07585,{"date":367,"score":63,"percentile":368},"2026-05-23",0.07591,{"date":370,"score":63,"percentile":371},"2026-05-24",0.07593,[373,378,384],{"source":73,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":374},{"baseScore":375,"baseSeverity":376,"vectorString":377,"impactScore":9,"exploitabilityScore":9},2.9,"LOW","CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/S:N/AU:Y/U:Amber",{"source":67,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":379,"cvss_v4_0":382},{"baseScore":65,"baseSeverity":380,"vectorString":68,"impactScore":65,"exploitabilityScore":381},"CRITICAL",10,{"baseScore":375,"baseSeverity":376,"vectorString":383,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:X/RE:X/U:Amber",{"source":74,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":385},{"baseScore":386,"baseSeverity":9,"vectorString":377,"impactScore":9,"exploitabilityScore":9},6.3,[388,403],{"ecosystem":9,"name":389,"vendor":390,"product":389,"cpe_part":391,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":392},"circl","cloudflare","a",[393,400],{"version":394,"is_range":395,"range_type":73,"version_start":396,"version_start_type":397,"version_end":398,"version_end_type":399,"fixed_in":9},">= CIRCL up to version 1.6.2, \u003C 1.6.3",true,"CIRCL up to version 1.6.2","including","1.6.3","excluding",{"version":401,"is_range":395,"range_type":402,"version_start":9,"version_start_type":9,"version_end":398,"version_end_type":399,"fixed_in":9},"lt1.6.3","cpe",{"ecosystem":404,"name":405,"vendor":406,"product":389,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":389,"source":9,"versions":408},"Go","github.com/cloudflare/circl","github.com/cloudflare","golang",[409],{"version":410,"is_range":395,"range_type":411,"version_start":9,"version_start_type":9,"version_end":398,"version_end_type":399,"fixed_in":9},"lt1_6_3","semver"]