CConsensys

Products

Exploited and recent CVEs

• CVE-2025-58157 High 7.5 gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm 0.5%
• CVE-2025-57801 High 8.6 gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks 0.2%
• CVE-2024-50354 Medium 5.5 Out-of-memory during deserialization with crafted inputs 0.3%
• CVE-2024-45039 Medium 6.2 gnark's Groth16 commitment extension unsound for more than one commitment 0.2%
• CVE-2024-45040 Medium 5.9 gnark's commitments to private witnesses in Groth16 as implemented break zero-knowledge property 0.4%
• CVE-2023-44378 High 7.1 gnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition 0.2%