Consensys vulnerabilities
We track 3 vulnerabilities in Consensys products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 29, 2025.
Latest Consensys vulnerabilities
- 7.5 High severity
gnark: Uncontrolled Resource Consumption
gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn't converge quickly enough for som
- 9.1 Critical severity
gnark: Improper Verification of Cryptographic Signature
gnark is a zero-knowledge proof system framework. In versions prior to 0.14.0, the Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S < order, leading to a signature malleability vulnerability. Because gnark
- 9.8 Critical severity
Gnark-crypto: Deserialization of Untrusted Data
Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and ECDSA signatures does not ensure that the data is in a certain interval.