{"id":3595259,"name":"github.com/holiman/uint256","ecosystem":"go","description":"","homepage":"https://github.com/holiman/uint256","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/holiman/uint256","keywords_array":[],"namespace":"github.com/holiman","versions_count":12,"first_release_published_at":"2020-03-23T07:32:40.000Z","latest_release_published_at":"2024-12-06T14:08:39.000Z","latest_release_number":"v1.3.2","last_synced_at":"2026-10-18T17:43:06.098Z","created_at":"2022-04-11T05:36:59.488Z","updated_at":"2026-10-19T00:29:01.491Z","registry_url":"https://pkg.go.dev/github.com/holiman/uint256","install_command":"go get github.com/holiman/uint256","documentation_url":"https://pkg.go.dev/github.com/holiman/uint256#section-documentation","metadata":null,"repo_metadata":{"id":42976871,"uuid":"123772553","full_name":"holiman/uint256","owner":"holiman","description":"Fixed size 256-bit math library","archived":false,"fork":false,"pushed_at":"2026-08-23T18:06:00.000Z","size":644,"stargazers_count":383,"open_issues_count":12,"forks_count":82,"subscribers_count":7,"default_branch":"master","last_synced_at":"2026-10-02T09:46:56.042Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/holiman.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2018-03-04T09:02:44.000Z","updated_at":"2026-09-24T09:49:50.000Z","dependencies_parsed_at":"2026-08-31T09:35:26.774Z","dependency_job_id":null,"html_url":"https://github.com/holiman/uint256","commit_stats":{"total_commits":274,"total_committers":21,"mean_commits":"13.047619047619047","dds":"0.44160583941605835","last_synced_commit":"0593a0b75d7d01f04469a756f9b00a4b6311fcca"},"previous_names":[],"tags_count":13,"template":false,"template_full_name":null,"purl":"pkg:github/holiman/uint256","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/holiman","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/sbom","scorecard":{"id":467730,"data":{"date":"2025-08-11","repo":{"name":"github.com/holiman/uint256","commit":"b2bde2d424303d4c61c00d8a2a75e4b671b4f1f2"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":7,"reason":"Found 23/30 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: goCommand not pinned by hash: oss-fuzz.sh:53","Warn: goCommand not pinned by hash: oss-fuzz.sh:72","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found","Info: GoBuiltInFuzzer integration found: binary_test.go:133","Info: GoBuiltInFuzzer integration found: binary_test.go:299","Info: GoBuiltInFuzzer integration found: conversion_fuzz_test.go:44","Info: GoBuiltInFuzzer integration found: conversion_test.go:1525","Info: GoBuiltInFuzzer integration found: conversion_test.go:1620","Info: GoBuiltInFuzzer integration found: decimal_test.go:122","Info: GoBuiltInFuzzer integration found: ternary_test.go:92","Info: GoBuiltInFuzzer integration found: uint256_test.go:896","Info: GoBuiltInFuzzer integration found: unary_test.go:67"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T12:56:47.880Z","repository_id":42976871,"created_at":"2025-08-19T12:56:47.880Z","updated_at":"2025-08-19T12:56:47.880Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38175308,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-11T02:00:05.703Z","response_time":113,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"holiman","name":"Martin HS","uuid":"142290","kind":"user","description":"","email":"","website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/142290?u=cc1c365b40d8b3b84e2622effc8c8f7792e2a216\u0026v=4","repositories_count":112,"last_synced_at":"2024-04-21T00:13:49.731Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/holiman","funding_links":[],"total_stars":783,"followers":1025,"following":2,"created_at":"2022-11-07T04:38:48.058Z","updated_at":"2024-04-21T00:13:59.843Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/holiman","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/holiman/repositories"},"tags":[{"name":"v1.3.2","sha":"a17fcfb6f8b0245533928fa96aace2cd4c2e9b18","kind":"commit","published_at":"2024-12-06T14:08:39.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v1.3.2","html_url":"https://github.com/holiman/uint256/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"ce90883143367a6067b2f501cca6847371e2692d","kind":"commit","published_at":"2024-07-25T08:11:27.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v1.3.1","html_url":"https://github.com/holiman/uint256/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"75a520988c94a5e04ae34e436fbeb5b701546867","kind":"commit","published_at":"2024-06-12T12:52:12.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v1.3.0","html_url":"https://github.com/holiman/uint256/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.3.0/manifests"},{"name":"v1.2.4","sha":"f24ed59bea89c23941cf073aeb3f702514f3b371","kind":"commit","published_at":"2023-11-27T13:29:19.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v1.2.4","html_url":"https://github.com/holiman/uint256/releases/tag/v1.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v1.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.2.4/manifests"},{"name":"v1.2.3","sha":"e42b95a00943c293245c6fe6b6855c483778e21b","kind":"commit","published_at":"2023-03-31T16:28:26.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v1.2.3","html_url":"https://github.com/holiman/uint256/releases/tag/v1.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v1.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.2.3/manifests"},{"name":"v1.2.2","sha":"29b48c8b5cbbc7a6eb80a1e1805bdc8773515f0f","kind":"commit","published_at":"2023-03-22T15:17:15.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v1.2.2","html_url":"https://github.com/holiman/uint256/releases/tag/v1.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v1.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.2.2/manifests"},{"name":"v1.2.1","sha":"6f8ccba90ce6cba9727ad5aa26bb925a25b50d29","kind":"commit","published_at":"2022-08-29T14:36:37.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v1.2.1","html_url":"https://github.com/holiman/uint256/releases/tag/v1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.2.1/manifests"},{"name":"v1.2.0","sha":"46b8ad94199afbcc12f2ca653481891165d829d5","kind":"commit","published_at":"2021-04-26T19:33:36.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v1.2.0","html_url":"https://github.com/holiman/uint256/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.2.0/manifests"},{"name":"v.1.2.0","sha":"46b8ad94199afbcc12f2ca653481891165d829d5","kind":"commit","published_at":"2021-04-26T19:33:36.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v.1.2.0","html_url":"https://github.com/holiman/uint256/releases/tag/v.1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v.1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v.1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v.1.2.0/manifests"},{"name":"v1.1.1","sha":"99b79c80738390408ef1a47f0e26812ef5506c02","kind":"commit","published_at":"2020-07-24T11:47:49.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v1.1.1","html_url":"https://github.com/holiman/uint256/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4ce82e695c10ddad57215bdbeafb68b8c5df2c30","kind":"commit","published_at":"2020-06-09T09:22:06.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v1.1.0","html_url":"https://github.com/holiman/uint256/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"63b803f281c5c713a12e6e19530a0418f0b78829","kind":"commit","published_at":"2020-05-13T13:07:58.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v1.0.0","html_url":"https://github.com/holiman/uint256/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v1.0.0/manifests"},{"name":"v0.1.0","sha":"07f9b0d1b1712a75022f5cede3ec65d7f5e121a7","kind":"tag","published_at":"2020-03-23T07:34:02.000Z","download_url":"https://codeload.github.com/holiman/uint256/tar.gz/v0.1.0","html_url":"https://github.com/holiman/uint256/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/holiman/uint256@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-10-11T03:29:45.157Z","dependent_packages_count":3179,"downloads":null,"downloads_period":null,"dependent_repos_count":5539,"rankings":{"downloads":null,"dependent_repos_count":0.11100609911081002,"dependent_packages_count":0.07428071678816821,"stargazers_count":3.461499374690197,"forks_count":3.5965050606489415,"docker_downloads_count":0.3355081537610838,"average":1.51575988099984},"purl":"pkg:golang/github.com/holiman/uint256","advisories":[{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptNWMtcnYzdy13ODNt","url":"https://github.com/advisories/GHSA-jm5c-rv3w-w83m","title":"Denial of service in geth","description":"### Impact\nDenial-of-service (crash) during block processing\n\n### Details\n\nAffected versions suffer from a vulnerability which can be exploited through the `MULMOD` operation, by specifying a modulo of `0`: `mulmod(a,b,0)`, causing a `panic` in the underlying library. \nThe crash was in the `uint256` library, where a buffer [underflowed](https://github.com/holiman/uint256/blob/4ce82e695c10ddad57215bdbeafb68b8c5df2c30/uint256.go#L442).\n\n\tif `d == 0`, `dLen` remains `0`\n\nand https://github.com/holiman/uint256/blob/4ce82e695c10ddad57215bdbeafb68b8c5df2c30/uint256.go#L451 will try to access index `[-1]`.\n\nThe `uint256` library was first merged in this [commit](https://github.com/ethereum/go-ethereum/commit/cf6674539c589f80031f3371a71c6a80addbe454), on 2020-06-08. \nExploiting this vulnerabilty would cause all vulnerable nodes to drop off the network. \n\nThe issue was brought to our attention through a [bug report](https://github.com/ethereum/go-ethereum/issues/21367), showing a `panic` occurring on sync from genesis on the Ropsten network.\n \nIt was estimated that the least obvious way to fix this would be to merge the fix into `uint256`, make a new release of that library and then update the geth-dependency.\n\n- https://github.com/holiman/uint256/releases/tag/v1.1.1 was made the same day, \n- PR to address the issue: https://github.com/holiman/uint256/pull/80 \n- PR to update geth deps: https://github.com/ethereum/go-ethereum/pull/21368 \n\n\n\n### Patches\n\nUpgrade to v1.9.18 or higher\n\n### Workarounds\n\nNot at this time\n\n### References\n\nhttps://blog.ethereum.org/2020/11/12/geth_security_release/\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [go-ethereum](https://github.com/ethereum/go-ethereum)\n* Email us at [security@ethereum.org](mailto:security@ethereum.org)\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-06-29T21:13:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/ethereum/go-ethereum/security/advisories/GHSA-jm5c-rv3w-w83m","https://nvd.nist.gov/vuln/detail/CVE-2020-26242","https://github.com/ethereum/go-ethereum/commit/7163a6664ee664df81b9028ab3ba13b9d65a7196","https://github.com/holiman/uint256/pull/80","https://github.com/holiman/uint256/commit/6785da6e3eea403260a5760029e722aa4ff1716d","https://pkg.go.dev/vuln/GO-2021-0103","https://blog.ethereum.org/2020/11/12/geth_security_release","https://github.com/advisories/GHSA-jm5c-rv3w-w83m"],"source_kind":"github","identifiers":["GHSA-jm5c-rv3w-w83m","CVE-2020-26242"],"repository_url":"https://github.com/ethereum/go-ethereum","blast_radius":0.0,"created_at":"2022-12-21T16:13:01.118Z","updated_at":"2026-10-18T23:27:27.221Z","epss_percentage":0.0148,"epss_percentile":0.72779,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptNWMtcnYzdy13ODNt","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptNWMtcnYzdy13ODNt","packages":[{"ecosystem":"go","package_name":"github.com/holiman/uint256","versions":[{"first_patched_version":"1.1.1","vulnerable_version_range":"\u003e= 0.1.0, \u003c 1.1.1"}],"purl":"pkg:go/github.com%2Fholiman%2Fuint256"},{"ecosystem":"go","package_name":"github.com/ethereum/go-ethereum","versions":[{"first_patched_version":"1.9.18","vulnerable_version_range":"\u003e= 1.9.16, \u003c 1.9.18"}],"purl":"pkg:go/github.com%2Fethereum%2Fgo-ethereum"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptNWMtcnYzdy13ODNt/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/holiman/uint256","docker_dependents_count":409,"docker_downloads_count":198645993,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/holiman/uint256","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/holiman/uint256/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-11T03:29:40.610Z","issues_count":31,"pull_requests_count":175,"avg_time_to_close_issue":9335002.086956521,"avg_time_to_close_pull_request":3807861.4402515725,"issues_closed_count":23,"pull_requests_closed_count":159,"pull_request_authors_count":29,"issue_authors_count":26,"avg_comments_per_issue":2.4193548387096775,"avg_comments_per_pull_request":1.9657142857142857,"merged_pull_requests_count":131,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":7,"past_year_avg_time_to_close_issue":63837.0,"past_year_avg_time_to_close_pull_request":501832.3333333333,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":4,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":2.0,"past_year_avg_comments_per_pull_request":0.14285714285714285,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":2,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/holiman%2Fuint256/issues","maintainers":[{"login":"holiman","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/holiman"},{"login":"chfast","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chfast"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fholiman%2Fuint256/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fholiman%2Fuint256/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fholiman%2Fuint256/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fholiman%2Fuint256/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fholiman%2Fuint256/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fholiman%2Fuint256/codemeta","maintainers":[]}