Skip to content
OpenAdvisories

Product · openvm-org

openvm

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9

    OpenVM's OpenVmHalo2Verifier accepts non-canonical app commitments

    OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `OpenVmHalo2Verifier.verify` accepts `appExeCommit` and `appVmCommit` as `bytes32` values withou…