Consensys

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Consensys records in CISA KEV

No Consensys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gnark 4 records HIGH Gnark-crypto 3 records MEDIUM Discovery 1 record LOW

Records

8 records

TI-2025-35973 CVE-2025-58157 · GHSA-9fvj-xqr2-xwg8

gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm

HIGH 72

gnark is a zero-knowledge proof system framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00536 Published 2025-08-29 Fixed in 0.13.0 CWE-400

TI-2025-35684 CVE-2025-57801 · GHSA-95v9-hv42-pwrj

gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks

HIGH 70

gnark is a zero-knowledge proof system framework.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00213 Published 2025-08-22 Fixed in 0.14.0 CWE-347

TI-2024-30151 CVE-2024-45039 · GHSA-q3hw-3gm4-w5cr

gnark's Groth16 commitment extension unsound for more than one commitment

MEDIUM 61

gnark is a fast zk-SNARK library that offers a high-level API to design circuits.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0019 Published 2024-09-06 Fixed in 0.11.0 CWE-200

TI-2024-30152 CVE-2024-45040 · GHSA-9xcg-3q8v-7fq6

gnark's commitments to private witnesses in Groth16 as implemented break zero-knowledge property

MEDIUM 60

gnark is a fast zk-SNARK library that offers a high-level API to design circuits.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00427 Published 2024-09-06 Fixed in 0.11.0 CWE-200

TI-2024-33789 CVE-2024-50354 · GHSA-cph5-3pgr-c82g

Out-of-memory during deserialization with crafted inputs

MEDIUM 58

gnark is a fast zk-SNARK library that offers a high-level API to design circuits.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00325 Published 2024-10-31 Fixed in 0.11.1 CWE-400

TI-2023-23797 CVE-2023-44273 · GHSA-fr8m-434r-g3xp

Consensys gnark-crypto through 0.11.2 allows Signature Malleability.

MEDIUM 51

Consensys gnark-crypto through 0.11.2 allows Signature Malleability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01055 Published 2023-09-28 Fixed in 0.12.0 CWE-502

TI-2023-23885 CVE-2023-44378 · GHSA-498w-5j49-vqjg

gnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition

LOW 31

gnark is a zk-SNARK library that offers a high-level API to design circuits.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00234 Published 2023-10-09 Fixed in 0.9.0 CWE-191

TI-2024-15706 CVE-2024-23688 · GHSA-w3hj-wr2q-x83g

Consensys Discovery Nonce Reuse

LOW 25

Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00493 Published 2024-01-19 Fixed in 0.4.5 CWE-323

Open these records in search →

Critical	1
High	3
Medium	4
Low	0
No CVSS	0