Vulnerabilities

TI-2025-35973 CVE-2025-58157 · GHSA-9fvj-xqr2-xwg8

gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm

HIGH 72

gnark is a zero-knowledge proof system framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00536 Published 2025-08-29 Fixed in 0.13.0 CWE-400

TI-2025-35684 CVE-2025-57801 · GHSA-95v9-hv42-pwrj

HIGH 70

gnark is a zero-knowledge proof system framework.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00213 Published 2025-08-22 Fixed in 0.14.0 CWE-347

TI-2024-33789 CVE-2024-50354 · GHSA-cph5-3pgr-c82g

MEDIUM 58

gnark is a fast zk-SNARK library that offers a high-level API to design circuits.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00325 Published 2024-10-31 Fixed in 0.11.1 CWE-400

TI-2023-23885 CVE-2023-44378 · GHSA-498w-5j49-vqjg

LOW 31

gnark is a zk-SNARK library that offers a high-level API to design circuits.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00234 Published 2023-10-09 Fixed in 0.9.0 CWE-191