Skip to content
Consensys vulnerabilities
Newest
-
consensys gnark
gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm
CVE-2025-58157
Fix available
7.5 High
-
consensys gnark
gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks
CVE-2025-57801
Fix available
8.6 High
-
consensys gnark
Out-of-memory during deserialization with crafted inputs
CVE-2024-50354
Fix available
5.5 Medium
-
consensys gnark, gnark-crypto +1 more
gnark's Groth16 commitment extension unsound for more than one commitment
CVE-2024-45039
Fix available
6.2 Medium
-
consensys gnark, gnark-crypto +1 more
gnark's commitments to private witnesses in Groth16 as implemented break zero-knowledge property
CVE-2024-45040
Fix available
5.9 Medium
-
consensys gnark
gnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition
CVE-2023-44378
Fix available
7.1 High
-
consensys gnark-crypto
Duplicate Advisory: Consensys gnark-crypto allows Signature Malleability
CVE-2023-44273
Fix available
9.8 Critical
-
consensys discovery
Consensys Discovery Nonce Reuse
CVE-2024-23688
Fix available
5.3 Medium