Security Advisories · Consensys/gnark · GitHub

Security Advisories

View known security vulnerabilities and report new vulnerabilities privately to maintainers.

Report a vulnerability

Out-of-memory during deserialization with crafted inputs
GHSA-cph5-3pgr-c82g published Oct 31, 2024 by ivokub

Moderate
Groth16 commitment extension unsound for more than one commitment
GHSA-q3hw-3gm4-w5cr published Sep 6, 2024 by ivokub

Moderate
Commitments to private witnesses in Groth16 as implemented break zero-knowledge property
GHSA-9xcg-3q8v-7fq6 published Sep 6, 2024 by ivokub

Moderate
Range checker gadget allows wider inputs up to word alignment
GHSA-rjjm-x32p-m3f7 published Nov 10, 2023 by ivokub

Low
Unsoundness in variable comparison / non-unique binary decomposition
GHSA-498w-5j49-vqjg published Oct 3, 2023 by gbotrel

High
Plonk verifier KZG multi point verification
GHSA-7p92-x423-vwj6 published Oct 16, 2023 by gbotrel

Critical