fix: upgrade filippo.io/edwards25519 v1.1.0 -> v1.1.1 (dependabot #8)#95
fix: upgrade filippo.io/edwards25519 v1.1.0 -> v1.1.1 (dependabot #8)#95
Conversation
Fixes MultiScalarMult invalid results / undefined behavior when receiver is not the identity point. Transitive via blinklabs-io/adder and blinklabs-io/gouroboros.
|
Warning Rate limit exceeded
⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Closes Dependabot alert #8.
filippo.io/edwards25519v1.1.0 has a bug where(*Point).MultiScalarMultproduces invalid results or undefined behavior if the receiver is not the identity point. Fixed in v1.1.1.Transitive dependency introduced via
blinklabs-io/adderandblinklabs-io/gouroboros. Pinned to v1.1.1 directly in go.mod to override.