@@ -64,6 +64,7 @@ release the patch once we believe it works.
| TROVE-2024-002 | tpo/onion-services/onionspray#45 | High | before commit 187a94d934b20a25 | 1.6.0 | Upstream HTTPS certificates not being validated |
| TROVE-2024-003 | arti#1409 | High | Arti 1.2.2 | Arti 1.2.3, tor-circmgr 0.18.1 | Arti: STUB circuits are too short (vanguards lite) | CVE-2024-35313 | |
| TROVE-2024-004 | arti#1400 | Medium | Arti 1.2.2 | Arti 1.2.3, tor-circmgr 0.18.1 | Arti: STUB circuits are used when STUB+ wanted, so too short (full vanguards) | | |
| TROVE-2024-005 | arti#1424 | High | Arti 1.2.3 | | | | |
Remember: please get CVE-Ids for everything of severity Medium or higher. To get a CVE-Id, visit https://cveform.mitre.org/ .
