Skip to content
OpenAdvisories

Package · crates.io

sp1-recursion-circuit

1 known vulnerabilities.

1 result · Feed

  • Low —

    sp1 has insufficient observation of cumulative sum

    During proof generation, the prover must observe all values sent to the verifier to generate valid Fiat-Shamir challenges. Prior to v3.0.0 the cumulative sum of the permutation argument was not observed when sampling zeta, which is a random challenge sampled …