gnark vulnerabilities

2 known vulnerabilities in gnark from Consensys. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  gnark: Uncontrolled Resource Consumption

  CVE-2025-58157Aug 29, 2025Consensys

  gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn't converge quickly enough for som

• 9.1 Critical severity

  gnark: Improper Verification of Cryptographic Signature

  CVE-2025-57801Aug 22, 2025Consensys

  gnark is a zero-knowledge proof system framework. In versions prior to 0.14.0, the Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S < order, leading to a signature malleability vulnerability. Because gnark