[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-26958":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T20:55:33.689Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":28,"aliases":29,"duplicate_of":9,"upstream":32,"downstream":33,"duplicates":54,"related":55,"reserved_at":9,"published_at":66,"modified_at":67,"state":68,"summary":69,"references_raw":77,"kevs":106,"epss":107,"epss_history":110,"metrics":374,"affected":384},"CVE-2026-26958","filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the identity point. If (*Point).MultiScalarMult is called on an initialized point that is not the identity point, it returns an incorrect result. If the method is called on an uninitialized point, the behavior is undefined. In particular, if the receiver is the zero value, MultiScalarMult returns an invalid point that compares Equal to every other point. Note that MultiScalarMult is a rarely used, advanced API. For example, users who depend on filippo.io/edwards25519 only through github.com/go-sql-driver/mysql are not affected. This issue has been fixed in version 1.1.1.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-665","Improper Initialization","The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.","weakness","Draft","Class","Medium",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-26","Leveraging Race Conditions",[],{"id":25,"name":26,"techniques":27},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],[],[30,31],"GHSA-fw7p-63qq-7hpr","GO-2026-4503",[],[34,36,38,40,42,44,46,48,50,52],{"_key":35},"SUSE-SU-2026:0757-1",{"_key":37},"SUSE-SU-2026:0777-1",{"_key":39},"OPENSUSE-SU-2026:10235-1",{"_key":41},"OPENSUSE-SU-2026:20386-1",{"_key":43},"SUSE-SU-2026:20904-1",{"_key":45},"SUSE-SU-2026:1524-1",{"_key":47},"OPENSUSE-SU-2026:10601-1",{"_key":49},"OPENSUSE-SU-2026:10618-1",{"_key":51},"DEBIAN-CVE-2026-26958",{"_key":53},"UBUNTU-CVE-2026-26958",[],[56,57,58,59,60,61,62,63,64],{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":65},"CGA-2P5W-8865-7RCH","2026-02-19T23:01:26.923Z","2026-02-20T15:39:04.748Z","Deferred",{"cisa_kev":70,"cisa_ransomware":70,"cisa_vendor":9,"epss_severity":71,"epss_score":72,"severity":71,"severity_score":73,"severity_version":74,"severity_source":75,"severity_vector":76,"severity_status":68},false,"low",0.00018,1.7,"v4.0","cve.org","CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U",[78,87,93,98,102],{"url":79,"sources":80,"tags":83},"https://github.com/FiloSottile/edwards25519/security/advisories/GHSA-fw7p-63qq-7hpr",[81,75,82],"osv_go","nvd",[84,85,86],"WEB","Advisory","X Refsource CONFIRM",{"url":88,"sources":89,"tags":90},"https://github.com/FiloSottile/edwards25519/commit/d1c650afb95fad0742b98d95f2eb2cf031393abb",[81,75,82],[84,91,92],"FIX","X Refsource MISC",{"url":94,"sources":95,"tags":96},"https://github.com/FiloSottile/edwards25519",[81],[97],"PACKAGE",{"url":99,"sources":100,"tags":101},"https://github.com/FiloSottile/edwards25519/releases/tag/v1.1.1",[81,75,82],[84,92],{"url":103,"sources":104,"tags":105},"https://nvd.nist.gov/vuln/detail/CVE-2026-26958",[81],[85],[],{"date":108,"score":72,"percentile":109},"2026-06-05",0.05085,[111,115,118,121,124,127,131,134,137,140,143,146,149,152,155,158,161,164,167,170,173,176,179,182,185,188,191,194,196,199,203,206,209,212,215,218,221,224,227,230,233,236,238,241,243,246,249,252,255,258,261,264,267,270,272,275,278,280,282,285,288,291,294,297,299,302,305,308,311,314,317,319,322,325,328,331,334,337,340,343,346,349,352,355,357,359,362,365,368,371],{"date":112,"score":113,"percentile":114},"2026-02-20",0.0004,0.12133,{"date":116,"score":113,"percentile":117},"2026-02-21",0.1216,{"date":119,"score":113,"percentile":120},"2026-02-22",0.12159,{"date":122,"score":113,"percentile":123},"2026-02-23",0.1213,{"date":125,"score":113,"percentile":126},"2026-02-24",0.12053,{"date":128,"score":129,"percentile":130},"2026-02-25",0.00052,0.16238,{"date":132,"score":129,"percentile":133},"2026-02-26",0.16203,{"date":135,"score":129,"percentile":136},"2026-02-27",0.16221,{"date":138,"score":129,"percentile":139},"2026-02-28",0.16224,{"date":141,"score":129,"percentile":142},"2026-03-01",0.1625,{"date":144,"score":129,"percentile":145},"2026-03-02",0.16182,{"date":147,"score":129,"percentile":148},"2026-03-03",0.16141,{"date":150,"score":129,"percentile":151},"2026-03-04",0.16095,{"date":153,"score":129,"percentile":154},"2026-03-05",0.16117,{"date":156,"score":129,"percentile":157},"2026-03-06",0.16114,{"date":159,"score":129,"percentile":160},"2026-03-07",0.16116,{"date":162,"score":129,"percentile":163},"2026-03-08",0.16081,{"date":165,"score":129,"percentile":166},"2026-03-09",0.1605,{"date":168,"score":129,"percentile":169},"2026-03-10",0.16041,{"date":171,"score":129,"percentile":172},"2026-03-11",0.16065,{"date":174,"score":129,"percentile":175},"2026-03-12",0.16127,{"date":177,"score":129,"percentile":178},"2026-03-13",0.16156,{"date":180,"score":129,"percentile":181},"2026-03-14",0.1616,{"date":183,"score":129,"percentile":184},"2026-03-15",0.16098,{"date":186,"score":129,"percentile":187},"2026-03-16",0.16062,{"date":189,"score":129,"percentile":190},"2026-03-17",0.16036,{"date":192,"score":129,"percentile":193},"2026-03-18",0.16047,{"date":195,"score":129,"percentile":172},"2026-03-19",{"date":197,"score":129,"percentile":198},"2026-03-20",0.1613,{"date":200,"score":201,"percentile":202},"2026-03-21",0.00016,0.0364,{"date":204,"score":201,"percentile":205},"2026-03-22",0.03637,{"date":207,"score":72,"percentile":208},"2026-03-23",0.04247,{"date":210,"score":72,"percentile":211},"2026-03-24",0.04236,{"date":213,"score":72,"percentile":214},"2026-03-25",0.04261,{"date":216,"score":72,"percentile":217},"2026-03-26",0.0429,{"date":219,"score":72,"percentile":220},"2026-03-27",0.04291,{"date":222,"score":72,"percentile":223},"2026-03-28",0.04294,{"date":225,"score":72,"percentile":226},"2026-03-29",0.04287,{"date":228,"score":72,"percentile":229},"2026-03-30",0.04262,{"date":231,"score":72,"percentile":232},"2026-03-31",0.04246,{"date":234,"score":72,"percentile":235},"2026-04-01",0.04253,{"date":237,"score":72,"percentile":223},"2026-04-02",{"date":239,"score":72,"percentile":240},"2026-04-03",0.04315,{"date":242,"score":72,"percentile":240},"2026-04-04",{"date":244,"score":72,"percentile":245},"2026-04-05",0.04309,{"date":247,"score":72,"percentile":248},"2026-04-06",0.04313,{"date":250,"score":72,"percentile":251},"2026-04-07",0.04327,{"date":253,"score":72,"percentile":254},"2026-04-08",0.04359,{"date":256,"score":72,"percentile":257},"2026-04-09",0.04374,{"date":259,"score":72,"percentile":260},"2026-04-10",0.04383,{"date":262,"score":72,"percentile":263},"2026-04-11",0.04368,{"date":265,"score":72,"percentile":266},"2026-04-12",0.04354,{"date":268,"score":72,"percentile":269},"2026-04-13",0.04335,{"date":271,"score":72,"percentile":223},"2026-04-14",{"date":273,"score":72,"percentile":274},"2026-04-15",0.04292,{"date":276,"score":72,"percentile":277},"2026-04-16",0.04306,{"date":279,"score":72,"percentile":248},"2026-04-17",{"date":281,"score":72,"percentile":248},"2026-04-18",{"date":283,"score":72,"percentile":284},"2026-04-19",0.04305,{"date":286,"score":72,"percentile":287},"2026-04-20",0.04289,{"date":289,"score":72,"percentile":290},"2026-04-21",0.04444,{"date":292,"score":72,"percentile":293},"2026-04-22",0.04452,{"date":295,"score":72,"percentile":296},"2026-04-23",0.04462,{"date":298,"score":72,"percentile":296},"2026-04-24",{"date":300,"score":72,"percentile":301},"2026-04-25",0.04484,{"date":303,"score":72,"percentile":304},"2026-04-26",0.04483,{"date":306,"score":72,"percentile":307},"2026-04-27",0.0448,{"date":309,"score":72,"percentile":310},"2026-04-28",0.04892,{"date":312,"score":72,"percentile":313},"2026-04-29",0.04914,{"date":315,"score":72,"percentile":316},"2026-04-30",0.0493,{"date":318,"score":72,"percentile":316},"2026-05-01",{"date":320,"score":72,"percentile":321},"2026-05-02",0.04938,{"date":323,"score":72,"percentile":324},"2026-05-03",0.04927,{"date":326,"score":72,"percentile":327},"2026-05-04",0.0492,{"date":329,"score":72,"percentile":330},"2026-05-05",0.04918,{"date":332,"score":72,"percentile":333},"2026-05-06",0.04928,{"date":335,"score":72,"percentile":336},"2026-05-07",0.04969,{"date":338,"score":72,"percentile":339},"2026-05-08",0.0497,{"date":341,"score":72,"percentile":342},"2026-05-09",0.05011,{"date":344,"score":72,"percentile":345},"2026-05-10",0.05026,{"date":347,"score":72,"percentile":348},"2026-05-11",0.05017,{"date":350,"score":72,"percentile":351},"2026-05-12",0.05013,{"date":353,"score":72,"percentile":354},"2026-05-13",0.05016,{"date":356,"score":72,"percentile":342},"2026-05-14",{"date":358,"score":72,"percentile":342},"2026-05-15",{"date":360,"score":72,"percentile":361},"2026-05-16",0.0502,{"date":363,"score":72,"percentile":364},"2026-05-17",0.05015,{"date":366,"score":72,"percentile":367},"2026-05-18",0.04993,{"date":369,"score":72,"percentile":370},"2026-05-19",0.04984,{"date":372,"score":72,"percentile":373},"2026-05-20",0.04981,[375,378,381],{"source":81,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":376},{"baseScore":377,"baseSeverity":9,"vectorString":76,"impactScore":9,"exploitabilityScore":9},6.3,{"source":75,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":379},{"baseScore":73,"baseSeverity":380,"vectorString":76,"impactScore":9,"exploitabilityScore":9},"LOW",{"source":82,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":382},{"baseScore":73,"baseSeverity":380,"vectorString":383,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[385,395],{"ecosystem":9,"name":386,"vendor":387,"product":386,"cpe_part":388,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":389},"filippo.io/edwards25519","filosottile","a",[390],{"version":391,"is_range":392,"range_type":75,"version_start":9,"version_start_type":9,"version_end":393,"version_end_type":394,"fixed_in":9},"\u003C 1.1.1",true,"1.1.1","excluding",{"ecosystem":396,"name":386,"vendor":397,"product":398,"cpe_part":9,"purl_type":399,"purl_namespace":397,"purl_name":398,"source":9,"versions":400},"Go","filippo.io","edwards25519","golang",[401],{"version":402,"is_range":392,"range_type":403,"version_start":9,"version_start_type":9,"version_end":393,"version_end_type":394,"fixed_in":9},"lt1_1_1","semver"]