nettle vulnerabilities
CVEs whose affected-version data names the nettle package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2021-3580High· 7.5A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.
▾ Twilightnettle_project · nettleEPSS 2.7%via NVD
CVE-2021-20305High· 8.1A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range s…
A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range s…
▾ Twilightnettle_project · nettleEPSS 1.7%via NVD