github.com/consensys/gnark vulnerabilities (Go)
8 vulnerabilities.
-
github.com/consensys/gnarkGo gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm 7.5 High -
github.com/consensys/gnarkGo gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks 8.6 High -
github.com/consensys/gnarkGo Out-of-memory during deserialization with crafted inputs 5.5 Medium -
github.com/consensys/gnarkGo gnark's Groth16 commitment extension unsound for more than one commitment 6.2 Medium -
github.com/consensys/gnarkGo gnark's commitments to private witnesses in Groth16 as implemented break zero-knowledge property 5.9 Medium -
github.com/consensys/gnarkGo gnark's range checker gadget allows wider inputs up to word alignment 3.2 Low -
github.com/consensys/gnarkGo Plonk verifier KZG multi point verification No score -
github.com/consensys/gnarkGo gnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition 7.1 High