orchard vulnerabilities (crates.io)

1 vulnerability.

• orchard crates.io Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness CVE-2026-54496 Fix available 9.3 CriticalJuly 6, 2026