GHSA-978j-88f3-p5j3
Threshold value is ignored (all shares are n=3)
Affected versions of this crate did not properly calculate secret shares requirements.
This reduces the security of the algorithm by restricting the crate to always using a threshold value of three, rather than a configurable limit.
The flaw was corrected by correctly configuring the threshold.
What each source reports
GitHub AdvisoriesNo score
Threshold value is ignored (all shares are n=3)
Affected versions of this crate did not properly calculate secret shares requirements.
This reduces the security of the algorithm by restricting the crate to always using a threshold value of three, rather than a configurable limit.
The flaw was corrected by correctly configuring the threshold.
- Record
GHSA-978j-88f3-p5j3- Updated
- 2026-11-02
OSVNo score
Threshold value is ignored (all shares are n=3)
Affected versions of this crate did not properly calculate secret shares requirements.
This reduces the security of the algorithm by restricting the crate to always using a threshold value of three, rather than a configurable limit.
The flaw was corrected by correctly configuring the threshold.
- Record
GHSA-978j-88f3-p5j3- Updated
- 2026-11-02
OSVRUSTSEC-2020-0160No score
Threshold value is ignored (all shares are n=3)
Affected versions of this crate did not properly calculate secret shares requirements.
This reduces the security of the algorithm by restricting the crate to always using a threshold value of three, rather than a configurable limit.
The flaw was corrected by correctly configuring the threshold.
- Record
RUSTSEC-2020-0160- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-978j-88f3-p5j3 is a vulnerability with no CVSS score yet in shamir, published January 21, 2020. No source lists public exploit code. Fixed in shamir 2.0.0.