TI-2025-35973 CVE-2025-58157 · GHSA-9fvj-xqr2-xwg8
gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm
Priority HIGH 72
gnark is a zero-knowledge proof system framework.
Vulnerabilities
8 records
TI-2025-35684 CVE-2025-57801 · GHSA-95v9-hv42-pwrj
gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks
Priority HIGH 70
gnark is a zero-knowledge proof system framework.
TI-2024-33789 CVE-2024-50354 · GHSA-cph5-3pgr-c82g
Out-of-memory during deserialization with crafted inputs
Priority MEDIUM 58
gnark is a fast zk-SNARK library that offers a high-level API to design circuits.
TI-2024-30151 CVE-2024-45039 · GHSA-q3hw-3gm4-w5cr
gnark's Groth16 commitment extension unsound for more than one commitment
Priority MEDIUM 61
gnark is a fast zk-SNARK library that offers a high-level API to design circuits.
TI-2024-30152 CVE-2024-45040 · GHSA-9xcg-3q8v-7fq6
gnark's commitments to private witnesses in Groth16 as implemented break zero-knowledge property
Priority MEDIUM 60
gnark is a fast zk-SNARK library that offers a high-level API to design circuits.
TI-2024-15706 CVE-2024-23688 · GHSA-w3hj-wr2q-x83g
Consensys Discovery Nonce Reuse
Priority LOW 25
Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session.
TI-2023-23885 CVE-2023-44378 · GHSA-498w-5j49-vqjg
gnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition
Priority LOW 31
gnark is a zk-SNARK library that offers a high-level API to design circuits.
TI-2023-23797 CVE-2023-44273 · GHSA-fr8m-434r-g3xp
Consensys gnark-crypto through 0.11.2 allows Signature Malleability.
Priority MEDIUM 51
Consensys gnark-crypto through 0.11.2 allows Signature Malleability.