Created by https://github.com/oasisprotocol/wallet/blob/master/.github/workflows/dump-validators.yml

If CI actions and checks don't run in this PR: close it and reopen.
https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs

Closes #2225
Uses https://capacitorjs.com/docs/apis/privacy-screen#privacyscreenconfig
- waits for final decision

note: slice settings can control other stuff in the future (themes etc)

Closes #2217

Tested with apk https://github.com/oasisprotocol/wallet/actions/runs/19856136732?pr=2220

Closes #2238

• by enabling Capacitor keyboard plugin scroll actually works when keyboard widgets shows up
• force scroll when there are more than 3 rows of words so user can see textarea and mnemonic grid
• squeeze native mobile view a little bit to gain some space

Closes #2237

https://github.com/capawesome-team/capacitor-plugins/tree/main/packages/android-edge-to-edge-support#usage

Closes #2226

• remove 400px restriction on mobile
• scrollable content takes max avail height
• if content is larger than max avail height show scrollbar

Built on top of #2228
Closes #2227

yarn changelog

-        versionCode 2
-        versionName "2.4.0"
+        versionCode 20050004161
+        versionName "2.5.0"

-                              CURRENT_PROJECT_VERSION = 2;
+                              CURRENT_PROJECT_VERSION = 20050004161;
-                              MARKETING_VERSION = 2.4.0;
+                              MARKETING_VERSION = 2.5.0;

yarn changelog

-        versionName "2.4.0"
+        versionName "2.5.0"

-                               MARKETING_VERSION = 2.4.0;
+                               MARKETING_VERSION = 2.5.0;

Related #2227 and #2229

// 2.5.0
versionCode 20050004163 // master
versionCode 205004164 // branch  
            2100000000 // max 

Reverts #2199

Closes #2221

• the fastest solution https://capacitorjs.com/docs/config -> adjustMarginsForEdgeToEdge

alternatives:

• maybe https://capawesome.io/plugins/android-edge-to-edge-support/
• or

android: {
  adjustMarginsForEdgeToEdge: 'auto', 
},
plugins: {
  StatusBar: {
    setOverlaysWebView: true,
  },
},

and controlling padding in app just for mobile builds (header/footer/check dialogs overflow etc)

Fixes: #652

This PR configures the ROFL builder container image by default for new and upgraded ROFL apps. Also provides clearer error messages when the container runtime is missing or native builds aren't supported.

Everyone should now just run oasis rofl build (regardless of platform).

Note: This changes the built artifacts again, but builds should now be fully reproducible across environments when using the Docker builder.

Changes:

• Builder container image is now configured by default for new and upgraded apps
• Stream tar directly to sqfstar instead of extracting to disk
• Split builder images: minimal rofl-container-builder for container apps, full rofl-dev for raw Rust apps

Tested this (and got reproducable builts on):

• ubuntu with oasis rofl build --no-container (no builder)
• ubuntu with oasis rofl build (uses builder)
• macos with builder oasis rofl build (uses builder)

TODO:

• Consider adding a CLI version field to the manifest (set on init/upgrade) to track which CLI version created/modified it.
• update quickstart docs to not recommend docker run --platform linux/amd64 --volume .:/src -it ghcr.io/oasisprotocol/rofl-dev:main oasis rofl build anymore, once this is released
  • done in oasisprotocol/oasis-sdk#2411

Table formatting change: The only regression is that columns are now separated by 3 spaces instead of tabs. This is actually an improvement as it makes output more portable across different terminals.

The eq function was used in common.mk but never defined, causing VERSION to always append -git<commit> even when building from an exact tag.

Also fix +dirty suffix to be added in case of uncommitted changes on the exact tag.

Fixes: #1227

Insert address preimages and queue verified contracts for bytecode analysis. Reprocess contracts missing preimages to backfill historical data from Sourcify.

Fixes: #1218

TODO:

• don't merge this until explorer is able to handle the int->string changes for the voting power etc
  • was done but not yet pushed to prod, lets just merge this

Fixes: #1213

TODO:

• test this query on live DB, if it's efficient enough (it does have appropriate index)

Small batch of icons for #2317

• licence source https://github.com/mui/material-ui/blob/master/LICENSE
• icons are slightly larger but takes the same space. Aligned with Transfer icon that was updated in prev PR
• 3 mui icons migrated to custom icons
• 1 icon adjusted via className

the last of #2317
Needs #2383, #2384

Closes #2391, prep for oasisprotocol/nexus#1222 (should work with old and new api)

backward compat

• validator snapshot voting and uptime card / validator details voting power
  https://pr-2399.oasis-explorer.pages.dev/mainnet/consensus/validators/oasis1qz0ea28d8p4xk8xztems60wq22f9pm2yyyd82tmt
  vs https://explorer.dev.oasis.io/mainnet/consensus/validators/oasis1qz0ea28d8p4xk8xztems60wq22f9pm2yyyd82tmt

• validator list cumulative voting, voting, commission, uptime columns
  https://pr-2399.oasis-explorer.pages.dev/mainnet/consensus/validators
  vs https://explorer.dev.oasis.io/mainnet/consensus/validators

• consensus snapshot epoch card
  https://pr-2399.oasis-explorer.pages.dev/mainnet/consensus
  vs https://explorer.dev.oasis.io/mainnet/consensus

Another batch of icons for #2317
Built on top off #2383

Closes #1555

https://pr-2248.oasis-explorer.pages.dev/testnet/sapphire/address/0x2B95834655499B3C3817f379e1C8E132baa965F4
vs https://explorer.dev.oasis.io/testnet/sapphire/address/0x2B95834655499B3C3817f379e1C8E132baa965F4

This one is still wrong oasisprotocol/oasis-sdk#2351
https://pr-2248.oasis-explorer.pages.dev/testnet/sapphire/address/oasis1qp3r8hgsnphajmfzfuaa8fhjag7e0yt35cjxq0u4
vs https://explorer.dev.oasis.io/testnet/sapphire/address/oasis1qp3r8hgsnphajmfzfuaa8fhjag7e0yt35cjxq0u4

https://pr-2248.oasis-explorer.pages.dev/mainnet/sapphire/address/0x0A400fb7b16760fF1ed77192cFE45cC303BcB980
vs https://explorer.dev.oasis.io/mainnet/sapphire/address/0x0A400fb7b16760fF1ed77192cFE45cC303BcB980

Small batch of icons for #2317

validator active/waiting/inactive chart circles
https://pr-2376.oasis-explorer.pages.dev/mainnet/consensus
vs https://explorer.dev.oasis.io/mainnet/consensus

secondary runtime chart button switcher (emerald/pontusX)
https://pr-2376.oasis-explorer.pages.dev/testnet/consensus
vs https://explorer.dev.oasis.io/testnet/consensus

consensus acc balance chart
https://pr-2376.oasis-explorer.pages.dev/mainnet/consensus/address/oasis1qzca4c3gch3ymy3w7e5ffzf9l6alpazpf5ffyytn
vs https://explorer.dev.oasis.io/mainnet/consensus/address/oasis1qzca4c3gch3ymy3w7e5ffzf9l6alpazpf5ffyytn

search icons at the bottom
https://pr-2376.oasis-explorer.pages.dev/search?q=oasis1qzca4c3gch3ymy3w7e5ffzf9l6alpazpf5ffyytn
vs https://explorer.dev.oasis.io/search?q=oasis1qzca4c3gch3ymy3w7e5ffzf9l6alpazpf5ffyytn

missing validator icon
https://pr-2376.oasis-explorer.pages.dev/mainnet/consensus/validators/oasis1qqekv2ymgzmd8j2s2u7g0hhc7e77e654kvwqtjwm
vs https://explorer.dev.oasis.io/mainnet/consensus/validators/oasis1qqekv2ymgzmd8j2s2u7g0hhc7e77e654kvwqtjwm

nft instance details image (contrast/full screen)
https://pr-2376.oasis-explorer.pages.dev/mainnet/emerald/token/0x903d32d7307b4b3FC4bc9a510CA658C91A346A67/instance/2
vs https://explorer.dev.oasis.io/mainnet/emerald/token/0x903d32d7307b4b3FC4bc9a510CA658C91A346A67/instance/2

nft gallery thumbnails
https://pr-2376.oasis-explorer.pages.dev/mainnet/emerald/token/0x903d32d7307b4b3FC4bc9a510CA658C91A346A67/inventory#inventory
vs https://explorer.dev.oasis.io/mainnet/emerald/token/0x903d32d7307b4b3FC4bc9a510CA658C91A346A67/inventory#inventory

cancel icon - cannot provide all no live examples
advance view - events empty state icon
https://pr-2376.oasis-explorer.pages.dev/mainnet/consensus/tx/978e5a21e7727f99104c5ee06a3586da7a54a6f817163a7c9637f2f2368fa5cd
vs https://explorer.dev.oasis.io/mainnet/consensus/tx/978e5a21e7727f99104c5ee06a3586da7a54a6f817163a7c9637f2f2368fa5cd

empty staked card
https://pr-2376.oasis-explorer.pages.dev/mainnet/consensus/address/oasis1qzca4c3gch3ymy3w7e5ffzf9l6alpazpf5ffyytn
vs https://explorer.dev.oasis.io/mainnet/consensus/address/oasis1qzca4c3gch3ymy3w7e5ffzf9l6alpazpf5ffyytn

https://pr-2376.oasis-explorer.pages.dev/mainnet/sapphire/address/0xFBe030f83EC3646cdAEAaA476c02f4b370611a8c
vs https://explorer.dev.oasis.io/mainnet/sapphire/address/0xFBe030f83EC3646cdAEAaA476c02f4b370611a8c

no preview avail
https://pr-2376.oasis-explorer.pages.dev/mainnet/sapphire/token/0x998633BDF6eE32A9CcA6c9A247F428596e8e65d8/inventory#inventory
vs https://explorer.dev.oasis.io/mainnet/sapphire/token/0x998633BDF6eE32A9CcA6c9A247F428596e8e65d8/inventory#inventory

help icon
https://pr-2376.oasis-explorer.pages.dev/mainnet/sapphire/tx/0xa9dd53e1d01b0b089aed72350825ff80a57a4b16a3c3a28cdeba2c0823f0e6b4
vs https://explorer.dev.oasis.io/mainnet/sapphire/tx/0xa9dd53e1d01b0b089aed72350825ff80a57a4b16a3c3a28cdeba2c0823f0e6b4

LayerPicker icons update including network status, network icons and chevrons.

Partial implementation of #2317

Before:

After:

Includes:

• Updated encryption lock icons from MUI to lucide-react icons.
• Added conditional alignment for status icons for Latest Transactions table in consensus.

Before:

After:

Closes #2385

Fixes #2377

http://localhost:1234/mainnet/consensus/block/17407756 showed "1 yr" and "2 years ago" in tooltip. This could be fixed with formatDistanceStrict rounding: floor, but then http://localhost:1234/mainnet/consensus/block/26177788 "4 mo" and "3 months ago" in tooltip. So instead, reused formatDistanceToNow.

Replace ArrowForwardIcon from MUI with ArrowRight lucide-react icona across the project.

Partial implementation of #2317

Updated at:
https://pr-2371.oasis-explorer.pages.dev/mainnet/sapphire/search?q=noresults
https://pr-2371.oasis-explorer.pages.dev/mainnet/consensus/tx?tx_method=staking.Transfer
https://pr-2371.oasis-explorer.pages.dev/mainnet/sapphire/tx/0x2fd1195b5c4ea9cc0e64af74c741686347e195e01b29a6e2b90ef49dfb4a70cc
https://pr-2371.oasis-explorer.pages.dev/mainnet/sapphire/tx?tx_method=accounts.Transfer
https://pr-2371.oasis-explorer.pages.dev/mainnet/sapphire/token/0x39d22B78A7651A76Ffbde2aaAB5FD92666Aca520

Update OpenInNewIcon MUI icon with ExternalLink from lucide-react.

Before:

After:

Align search/details labels with #2381

https://pr-2382.oasis-explorer.pages.dev/search?q=11%2C809%2C586
vs https://explorer.dev.oasis.io/search?q=11%2C809%2C586

Also fixes #1510

73002b9#r173215932

Reverts dd6fc7a

Fixes #1511

Removing icons as they are not used in new designs anymore.

Partial implementation of #2317

includes oasisprotocol/ui-library#94

https://pr-2373.oasis-explorer.pages.dev/mainnet/sapphire/rofl/app/rofl1qze0hqur8xf20xfd44fke8dayysdq8p2wu23x0zp?q=rofl1qze0hqur8xf20xfd44fke8dayysdq8p2wu23x0zp

vs https://explorer.dev.oasis.io/mainnet/sapphire/rofl/app/rofl1qze0hqur8xf20xfd44fke8dayysdq8p2wu23x0zp?q=rofl1qze0hqur8xf20xfd44fke8dayysdq8p2wu23x0zp

Closes #2307

Update copy icon from MUI to lucide-react.

Partial implementation of #2317

Before:

After:

make this prettier

https://explorer.oasis.io/mainnet/sapphire/tx/0xe2a987eab2cd07d741dc7520a9586562231cf382123f993c8ea0f4052c97ac1a

Needs to be updated in rose app and votee repo as well

This PR adds a new Rust crate providing an async client for ROFL appd over Unix domain sockets. Includes core APIs for app id, key generation, and transaction sign+submit, along with docs and an example.

Once this is merged, runtimes using the latest version of Oasis SDK must run on Oasis Core 25.8 or later, as the Core must support the GetValidators function and corresponding runtime handler function for RHP protocol.

Fix transaction deserialization issues causing 422 errors in ROFL appd

• Fix value field: Change u128 to u64 in TransactionValue enum (serde_json doesn't support u128 in untagged enums). Large values must use string format.
• Fix hex field flexibility: to, data, and gas_limit now accept values with or without 0x prefix, and gas_limit accepts both numbers and strings.

Python client changes from #2416.

Merge this once oasisprotocol/cli#657 is merged and released

Add changelog entries for three releases:

• 0.1.7: app_id endpoint, sign_submit endpoint, sphinx pydoc format, release workflow fix
• 0.1.6: set_metadata response parsing fix
• 0.1.5: queries support, appd metadata endpoints

fixes:

• Add missing query method to README
• send value as string in sign_submit

closes #2394

This field is currently required by mistake

Closes #275.

PREVIEW

Introduces documentation and a new example project for implementing encrypted events on Oasis Sapphire. This allows developers to emit confidential event data that can only be decrypted by authorized parties.

Key Changes:

• Core Documentation (docs/develop/encrypted-events.mdx): Added a new page detailing three patterns for emitting confidential event data:
  1. Passing a symmetric key directly.
  2. Deriving a shared secret via ECDH.
  3. On-chain key generation for ROFL.

• Example Project (examples/encrypted-events): Created a new project that includes:
  * Solidity contracts for the key-passing and ECDH patterns.
  * Hardhat tasks (emit, listen, decrypt, deploy, deploy-ecdh) for the full workflow.
  * A test suite covering core functionality and AAD binding.

Example under: https://github.com/oasisprotocol/sapphire-paratime/tree/docs/275-add-encrypted-events-tutorial/examples/encrypted-events

Sidebar update in docs PR: oasisprotocol/docs#1398

Fixes #654

PREVIEW

A working PoC lives here: https://github.com/oasisprotocol/demo-starter/tree/matevz/simulation-attack/backend

TODO: Move the PoC to a simpler separate demo-simulation-attack repo and add the :::example admonition to the docs.

In #624 there was an issue discovered for the multichain case, where using the same connector(i.e. MetaMask) wagmi would cache the connectors, causing a collision between the wrapped and unwrapped connector. This was not an issue previously in #550 as the providers were decoupled/duplicated before being fed into wagmi. Adding chain aware wrapping seems to work, so that the connector is only wrapped on Sapphire chains, otherwise it returns unwrapped connector.

Recent #634 introduced some breaking changes for WalletConnect connector. This PR addresses the change, by obtaining the chainId from the provider itself, instead of calling request on the WalletConnect provider. ChainId is already handled internally in WalletConnect provider, so there is no need to call eth_chainId method on said provider.

Fixes two issues:

• too new version of solc shipped with forge. Run make clean to clear incompatible cache from the old solc version.
• workaround for mdbook-pagetoc@0.3.0 Unable to parse input on mdbook 0.5.x error (similar bug: lzanini/mdbook-katex#130)

MetaMask version 12.23.0 is no longer available, while the dappwright recommendedVersion pointed to 12.23.0 the CI will be erroring out.

Until the recommended version is updated, that is the version that works for now.

Tracked here: TenKeyLabs/dappwright#506

Fixes dappwright test errors. e.g. https://github.com/oasisprotocol/sapphire-paratime/actions/runs/20300938387/job/58306101774?pr=612

xvfb-run pnpm test
  shell: /usr/bin/bash -e {0}
  env:
    SAPPHIRE_LOCALNET_HTTP_PROXY_PORT: 3001
    PNPM_HOME: /home/runner/setup-pnpm/node_modules/.bin

> sapphire-examples-wagmi-v2@0.0.0 test /home/runner/work/sapphire-paratime/sapphire-paratime/examples/wagmi-v2
> playwright test

[WebServer] 
[WebServer] > sapphire-examples-wagmi-v2@0.0.0 start:server /home/runner/work/sapphire-paratime/sapphire-paratime/examples/wagmi-v2
[WebServer] > vite --port 3000
[WebServer] 
[WebServer] 
[WebServer]   VITE v4.5.13  ready in 247 ms
[WebServer] 
[WebServer]   ➜  Local:   http://localhost:3000/
[WebServer]   ➜  Network: use --host to expose

Running 6 tests using 2 workers


Seems you are running a newer version (12.23.1) of metamask than recommended by the Dappwright team.
      Use it at your own risk or set to the recommended version "12.23.0".

Downloading metamask...
  ✘  2 [main] › test/e2e.spec.ts:79:3 › deploy contract and send encrypted transaction /#/wagmi (712ms)
  -  3 [main] › test/e2e.spec.ts:79:3 › deploy contract and send encrypted transaction /#/wagmi-injected
  -  4 [main] › test/e2e.spec.ts:79:3 › deploy contract and send encrypted transaction /#/wagmi-multichain
  -  5 [main] › test/e2e.spec.ts:79:3 › deploy contract and send encrypted transaction /#/wagmi-multichain?plain
  -  6 [main] › test/e2e.spec.ts:79:3 › deploy contract and send encrypted transaction /#/rainbowkit

Seems you are running a newer version (12.23.1) of metamask than recommended by the Dappwright team.
      Use it at your own risk or set to the recommended version "12.23.0".

Downloading metamask...
  ✘  7 [main] › test/e2e.spec.ts:79:3 › deploy contract and send encrypted transaction /#/wagmi (retry #1) (419ms)
  -  8 [main] › test/e2e.spec.ts:79:3 › deploy contract and send encrypted transaction /#/wagmi-injected (retry #1)
  -  9 [main] › test/e2e.spec.ts:79:3 › deploy contract and send encrypted transaction /#/wagmi-multichain (retry #1)
  -  10 [main] › test/e2e.spec.ts:79:3 › deploy contract and send encrypted transaction /#/wagmi-multichain?plain (retry #1)
  -  11 [main] › test/e2e.spec.ts:79:3 › deploy contract and send encrypted transaction /#/rainbowkit (retry #1)
  ✓  1 [main] › test/wallet-connect.spec.ts:4:2 › WalletConnect › should have no error when selecting WalletConnect in RainbowKit modal (1.5s)


  1) [main] › test/e2e.spec.ts:79:3 › deploy contract and send encrypted transaction /#/wagmi ──────

    'Version 12.23.1 not found!'

    Retry #1 ───────────────────────────────────────────────────────────────────────────────────────

    'Version 12.23.1 not found!'

    attachment #1: trace (application/zip) ─────────────────────────────────────────────────────────
    test-results/e2e-deploy-contract-and-send-encrypted-transaction-wagmi-main-retry1/trace.zip
    Usage:

        pnpm exec playwright show-trace test-results/e2e-deploy-contract-and-send-encrypted-transaction-wagmi-main-retry1/trace.zip

    ────────────────────────────────────────────────────────────────────────────────────────────────

  1 failed
    [main] › test/e2e.spec.ts:79:3 › deploy contract and send encrypted transaction /#/wagmi ───────
  4 did not run
  1 passed (9.1s)
 ELIFECYCLE  Test failed. See above for more details.
Error: Process completed with exit code 1.

🔗 zboto Link

This PR:

• Makes titles and bolds less aggressive
• Makes the Example admonition use docusaurus primitives
• Makes caution admonition orange darker for better readability
• Makes comments in highlighted lines in code blocks more readable
• Fixes CoreGraphic color to bright blue in the dark theme
• Fixes vertical alignment of <code> inlines (workaround for facebook/docusaurus#10652)

EPID attestation is outdated. Relates to oasisprotocol/oasis-core#6426.

It's that time of the year again ;)

Oasis Core 25.9 for TESTNET was released.
Docs should be aligned.

Updated the grant application link and removed outdated information about oracle solutions.

resolves build error for oasisprotocol/sapphire-paratime#612

Closes #1586.

This makes the diagram more illustrative and consistent with other diagrams where we started to replace generic "ParaTime" box with "Sapphire confidential EVM chain" blockchain diagram.

closes #142

closes #148

Followup to oasisprotocol/sapphire-paratime#636

Followup to oasisprotocol/sapphire-paratime#636

Followup to oasisprotocol/sapphire-paratime#636

In the future there will be no empty EpochTransition runtime blocks, so we need to change the committee worker to be able to run without relying on HeaderType of runtime blocks.

Solves the following dependency problem:

• #6428

pkg:golang/github.com/quic-go/quic-go@v0.55.0
1 known vulnerabilities affecting installed version
┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃ [CVE-2025-64702] CWE-770: Allocation of Resources Without Limits or Throttling                                                                                                                                        ┃
┣━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫
┃ Description        ┃ quic-go is an implementation of the QUIC protocol in Go. Versions 0.56.0                                                                                                                         ┃
┃                    ┃ and below are vulnerable to excessive memory allocation through quic-go's                                                                                                                        ┃
┃                    ┃ HTTP/3 client and server implementations by sending a QPACK-encoded HEADERS                                                                                                                      ┃
┃                    ┃ frame that decodes into a large header field section (many unique header                                                                                                                         ┃
┃                    ┃ names and/or large values). The implementation builds an http.Header (used                                                                                                                       ┃
┃                    ┃ on the http.Request and http.Response, respectively), while only enforcing                                                                                                                       ┃
┃                    ┃ limits on the size of the (QPACK-compressed) HEADERS frame, but not on the                                                                                                                       ┃
┃                    ┃ decoded header, leading to memory exhaustion. This issue is fixed in                                                                                                                             ┃
┃                    ┃ version 0.57.0.                                                                                                                                                                                  ┃
┣━━━━━━━━━━━━━━━━━━━━╋━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫
┃ OSS Index ID       ┃ CVE-2025-64702                                                                                                                                                                                   ┃
┣━━━━━━━━━━━━━━━━━━━━╋━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫
┃ CVSS Score         ┃ 5.3/10 (Medium)                                                                                                                                                                                  ┃
┣━━━━━━━━━━━━━━━━━━━━╋━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫
┃ CVSS Vector        ┃ CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L                                                                                                                                                     ┃
┣━━━━━━━━━━━━━━━━━━━━╋━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫
┃ Link for more info ┃ https://ossindex.sonatype.org/vulnerability/CVE-2025-64702?component-type=golang&component-name=github.com%2Fquic-go%2Fquic-go&utm_source=nancy-client&utm_medium=integration&utm_content=1.0.33 ┃
┗━━━━━━━━━━━━━━━━━━━━┻━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛