There is 1 open security issue in bookworm.
1 issue left for the package maintainer to handle:
- CVE-2025-8556:
(needs triaging)
A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.
You can find information about how to handle this issue in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/g/golang-github-cloudflare-circl.png){kind=link}