Skip to content
OpenAdvisories

Package · crates.io

soroban-sdk

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2026-32322

    soroban-sdk: `Fr` scalar field equality comparison bypasses modular reduction

    soroban-sdk is a Rust SDK for Soroban contracts. Prior to 22.0.11, 23.5.3, and 25.3.0, The Fr (scalar field) types for BN254 and BLS12-381 in soroban-sdk compared values using their raw U256 representation without first reducing modulo the field modulus r. Th…

    stellar rs-soroban-sdk soroban-sdk crates.io
  • Medium 5.3
    CVE-2026-24889

    soroban-sdk has overflow in Bytes::slice, Vec::slice, GenRange::gen_range for u64

    soroban-sdk is a Rust SDK for Soroban contracts. Arithmetic overflow can be triggered in the `Bytes::slice`, `Vec::slice`, and `Prng::gen_range` (for `u64`) methods in the `soroban-sdk` in versions up to and including `25.0.1`, `23.5.1`, and `25.0.2`. Contrac…

    stellar rs-soroban-sdk soroban-sdk crates.io