Vulnerabilities

TI-2024-30151 CVE-2024-45039 · GHSA-q3hw-3gm4-w5cr

gnark's Groth16 commitment extension unsound for more than one commitment

MEDIUM 61

gnark is a fast zk-SNARK library that offers a high-level API to design circuits.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0019 Published 2024-09-06 Fixed in 0.11.0 CWE-200

TI-2024-30152 CVE-2024-45040 · GHSA-9xcg-3q8v-7fq6

MEDIUM 60

gnark is a fast zk-SNARK library that offers a high-level API to design circuits.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00427 Published 2024-09-06 Fixed in 0.11.0 CWE-200

TI-2023-23797 CVE-2023-44273 · GHSA-fr8m-434r-g3xp

MEDIUM 51

Consensys gnark-crypto through 0.11.2 allows Signature Malleability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01055 Published 2023-09-28 Fixed in 0.12.0 CWE-502