All products

github.com/consensys/gnark

Go · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
gnark unsoundness in variable comparison / non-unique binary decompositionCVE-2023-44378 · GHSA-498W-5J49-VQJGVersion ranges need review. github.com/consensys/gnark Go Medium Fix reported
gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithmCVE-2025-58157 · GHSA-9FVJ-XQR2-XWG8Version ranges need review. github.com/consensys/gnark Go High Fix reported
gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checksCVE-2025-57801 · GHSA-95V9-HV42-PWRJVersion ranges need review. github.com/consensys/gnark Go High Fix reported
gnark's Groth16 commitment extension unsound for more than one commitmentCVE-2024-45039 · GHSA-Q3HW-3GM4-W5CRVersion ranges need review. github.com/consensys/gnark Go Medium Fix reported
Gnark out-of-memory during deserialization with crafted inputsCVE-2024-50354 · GHSA-CPH5-3PGR-C82GVersion ranges need review. github.com/consensys/gnark Go Medium Fix reported
gnark commitments to private witnesses in Groth16 as implemented break zero-knowledge propertyCVE-2024-45040 · GHSA-9XCG-3Q8V-7FQ6Version ranges need review. github.com/consensys/gnark Go High Fix reported
Plonk verifier KZG multi point verificationGHSA-7P92-X423-VWJ6 · GO-2023-2119Version ranges need review. github.com/consensys/gnark Go Critical Fix reported
gnark's range checker gadget allows wider inputs up to word alignmentGHSA-RJJM-X32P-M3F7 · GO-2023-2333Version ranges need review. github.com/consensys/gnark Go Low Fix reported