Vulnerabilities

TI-2026-83374 CVE-2026-62333

OpenVM MemoryMerkleAir lets forged rows change the memory root

MEDIUM 44

OpenVM is a performant and modular zkVM framework built for customization and extensibility.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00396 Published 2026-10-30 Fixed in 1.7.0, 2.0.0-rc.3 +1 CWE-20

TI-2026-83375 CVE-2026-62334

MEDIUM 44

OpenVM is a performant and modular zkVM framework built for customization and extensibility.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00525 Published 2026-10-30 Fixed in 1.7.0, 2.0.0-rc.3 +1 CWE-754

TI-2026-83376 CVE-2026-62335

LOW 37

OpenVM is a performant and modular zkVM framework built for customization and extensibility.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00379 Published 2026-10-30 Fixed in 1.7.0, 2.0.0-rc.3 +1 CWE-20

TI-2025-29394 CVE-2025-46723 · GHSA-jf2r-x3j4-23m7

MEDIUM 41

OpenVM is a performant and modular zkVM framework built for customization and extensibility.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.00483 Published 2025-05-02 Fixed in 1.1.0 CWE-131