9 Total advisories
9 Vulnerabilities
0 Malware
Dependency scanning
Check whether github.com/cloudflare/circl is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
UNKNOWN
CVE-2026-1229
CIRCL has an incorrect calculation in secp384r1 CombinedMult
LOW 3.7
CVE-2025-8556
CIRCL-Fourq: Missing and wrong validation can lead to incorrect results
UNKNOWN
GO-2024-2453
CIRCL's Kyber: timing side-channel (kyberslash2)
MEDIUM 5.3
CVE-2023-1732
Improper random reading in CIRCL
UNKNOWN
CVE-2026-1229
CIRCL has an incorrect calculation in secp384r1 CombinedMult in github.com/cloudflare/circl
UNKNOWN
GHSA-9763-4f94-gfch
Timing side channel in github.com/cloudflare/circl
UNKNOWN
CVE-2025-8556
CIRCL-Fourq: Missing and wrong validation can lead to incorrect results in github.com/cloudflare/circl
UNKNOWN
CVE-2023-1732
Leaked shared secret and weak blinding in github.com/cloudflare/circl
LOW 3.7
GHSA-522r-9946-fw43
Duplicate Advisory: CIRCL-Fourq: Missing and wrong validation can lead to incorrect results
Browse more Go advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes