Skip to content
OpenAdvisories

Package · Go

github.com/consensys/gnark-crypto

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2023-44273

    gnark-crypto doesn't range check input values during ECDSA and EdDSA signature deserialization

    Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and ECDSA signatures does not ensure that the data is in a certain interval.

    github.com/consensys/gnark-crypto Go