secp256k1-native vulnerabilities

CVEs whose affected-version data names the secp256k1-native package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-63410Medium· 5.9PoC

1w ago

secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication

secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through `Point#mul` or `scalar_multiply_ct` can leak timing information about a secret scalar when co…

▾ Twilightsgbett · secp256k1-nativeEPSS 0.28%via CVEORG