consensys/gnark Security Advisories | GitStock

high2025-08-29

gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm

GHSA-9fvj-xqr2-xwg8 · CVE-2025-58157

high2025-08-22

gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks

GHSA-95v9-hv42-pwrj · CVE-2025-57801

medium2024-10-31

Gnark out-of-memory during deserialization with crafted inputs

GHSA-cph5-3pgr-c82g · CVE-2024-50354

medium2024-09-06

gnark's Groth16 commitment extension unsound for more than one commitment

GHSA-q3hw-3gm4-w5cr · CVE-2024-45039

high2024-09-06

gnark commitments to private witnesses in Groth16 as implemented break zero-knowledge property

GHSA-9xcg-3q8v-7fq6 · CVE-2024-45040

low2023-11-12

gnark's range checker gadget allows wider inputs up to word alignment

GHSA-rjjm-x32p-m3f7

critical2023-10-17

Plonk verifier KZG multi point verification

GHSA-7p92-x423-vwj6

medium2023-10-04

gnark unsoundness in variable comparison / non-unique binary decomposition

GHSA-498w-5j49-vqjg · CVE-2023-44378