Consensys Gnark-Crypto
3 CVEs affecting Consensys Gnark-Crypto. Latest disclosed: 2024-09-06. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-44273 | Critical | 9.8 | 2023-09-28 | Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and ECDSA signatures does not ensure that the… |
CVE-2024-45039 | Medium | 6.2 | 2024-09-06 | gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundness issue - in case of multiple commitm… |
CVE-2024-45040 | Medium | 5.9 | 2024-09-06 | gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.11.0, commitments to private witnesses in Groth16 as imple… |