PatchTheCVE: consensys

CVE-2025-58157: gnark is a zero-knowledge proof system framework

Sun, 18 Oct 2026 21:10:00 +0000

HIGH 7.5: gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn't converge quickly enough for some of the inputs. This issue has been pat

CVE-2025-57801: gnark is a zero-knowledge proof system framework

Wed, 17 Jun 2026 09:43:27 +0000

CRITICAL 9.1: gnark is a zero-knowledge proof system framework. In versions prior to 0.14.0, the Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S < order, leading to a signature malleability vulnerability. Because gnark’s native EdDSA and ECDSA circuits lack

CVE-2024-50354: gnark is a fast zk-SNARK library that offers a high-level API to design circuits

Wed, 17 Jun 2026 08:04:17 +0000

MEDIUM 5.5: gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 verification keys allocate excessive memory, consuming a lot of resources and triggering a crash with the error fatal error: runtime: out of memory.

CVE-2024-45040: gnark is a fast zk-SNARK library that offers a high-level API to design circuits

Wed, 17 Jun 2026 07:53:28 +0000

MEDIUM 5.9: gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.11.0, commitments to private witnesses in Groth16 as implemented break the zero-knowledge property. The vulnerability affects only Groth16 proofs with commitments. Notably, PLONK proofs are not affec

CVE-2024-45039: gnark is a fast zk-SNARK library that offers a high-level API to design circuits

Wed, 17 Jun 2026 07:53:28 +0000

MEDIUM 6.2: gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundness issue - in case of multiple commitments used inside the circuit the prover is able to choose all but the last commitment. As gnark uses the commitments for optimized non-native