Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose

{
                    "collectionURL": "https://repo.hex.pm",
                    "cpes": [
                        "cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*"
                    ],
                    "defaultStatus": "unaffected",
                    "modules": [
                        "jose_jwa_x25519",
                        "jose_jwa_curve25519",
                        "jose_curve25519_fallback",
                        "jose_jwk_kty_okp_x25519"
                    ],
                    "packageName": "jose",
                    "packageURL": "pkg:hex/jose",
                    "product": "jose",
                    "programFiles": [
                        "src/jwa/jose_jwa_x25519.erl",
                        "src/jwa/jose_jwa_curve25519.erl",
                        "src/jwa/curve25519/jose_curve25519_fallback.erl",
                        "src/jwk/jose_jwk_kty_okp_x25519.erl"
                    ],
                    "programRoutines": [
                        {
                            "name": "jose_jwa_x25519:curve25519/2"
                        },
                        {
                            "name": "jose_jwa_x25519:scalarmult/2"
                        },
                        {
                            "name": "jose_jwa_x25519:scalarmult_base/1"
                        },
                        {
                            "name": "jose_jwa_x25519:x25519/2"
                        },
                        {
                            "name": "jose_jwa_x25519:x25519_base/1"
                        },
                        {
                            "name": "jose_jwa_x25519:sk_to_pk/1"
                        },
                        {
                            "name": "jose_jwa_x25519:montgomery_add/3"
                        },
                        {
                            "name": "jose_jwa_x25519:montgomery_double/1"
                        },
                        {
                            "name": "jose_jwa_curve25519:x25519_shared_secret/2"
                        },
                        {
                            "name": "jose_jwa_curve25519:x25519_secret_to_public/1"
                        }
                    ],
                    "repo": "https://github.com/potatosalad/erlang-jose",
                    "vendor": "potatosalad",
                    "versions": [
                        {
                            "lessThan": "1.11.13",
                            "status": "affected",
                            "version": "1.10.0",
                            "versionType": "semver"
                        }
                    ]
                }

{
                    "collectionURL": "https://github.com",
                    "cpes": [
                        "cpe:2.3:a:potatosalad:jose:*:*:*:*:*:*:*:*"
                    ],
                    "defaultStatus": "unaffected",
                    "modules": [
                        "jose_jwa_x25519",
                        "jose_jwa_curve25519",
                        "jose_curve25519_fallback",
                        "jose_jwk_kty_okp_x25519"
                    ],
                    "packageName": "potatosalad/erlang-jose",
                    "packageURL": "pkg:github/potatosalad/erlang-jose",
                    "product": "jose",
                    "programFiles": [
                        "src/jwa/jose_jwa_x25519.erl",
                        "src/jwa/jose_jwa_curve25519.erl",
                        "src/jwa/curve25519/jose_curve25519_fallback.erl",
                        "src/jwk/jose_jwk_kty_okp_x25519.erl"
                    ],
                    "programRoutines": [
                        {
                            "name": "jose_jwa_x25519:curve25519/2"
                        },
                        {
                            "name": "jose_jwa_x25519:scalarmult/2"
                        },
                        {
                            "name": "jose_jwa_x25519:scalarmult_base/1"
                        },
                        {
                            "name": "jose_jwa_x25519:x25519/2"
                        },
                        {
                            "name": "jose_jwa_x25519:x25519_base/1"
                        },
                        {
                            "name": "jose_jwa_x25519:sk_to_pk/1"
                        },
                        {
                            "name": "jose_jwa_x25519:montgomery_add/3"
                        },
                        {
                            "name": "jose_jwa_x25519:montgomery_double/1"
                        },
                        {
                            "name": "jose_jwa_curve25519:x25519_shared_secret/2"
                        },
                        {
                            "name": "jose_jwa_curve25519:x25519_secret_to_public/1"
                        }
                    ],
                    "repo": "https://github.com/potatosalad/erlang-jose",
                    "vendor": "potatosalad",
                    "versions": [
                        {
                            "lessThan": "3670f873c274bba86fb7f5ee5727a7efa1322b79",
                            "status": "affected",
                            "version": "8e532095de114ef4bf88a9ec5d651fa251a972b3",
                            "versionType": "git"
                        }
                    ]
                }