entropy-derby vulnerabilities
1 known vulnerability in entropy-derby from Mescuwa. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest first
- 8.7 High severity
entropy-derby: Exposure of Sensitive Information to an Unauthorized Actor
Inside Track / Entropy Derby is a research-grade horse-racing betting engine. Prior to commit 2d38d2f, the VDF-based timelock encryption system fails to enforce sequential delay against the betting operator. Bettors pre-compute the entire Wesolowski VDF and in