-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| shamir | rust | < 2.0.0 | 2.0.0 |
Miggo AIRoot Cause AnalysisThe vulnerability root cause is clearly identified in the GitHub issue as a malformed array initialization in SecretData::with_secret. The line 'let mut rand_container = [0u8, threshold - 1];' creates a 2-element array instead of an array with threshold-1 elements, leading to fixed 3-share threshold. This matches the described vulnerability behavior where threshold configuration was ignored. The function name and code snippet are explicitly mentioned in the provided issue details.