Consensys Gnark-crypto — known CVE vulnerabilities

Every CVE whose affected-product data names Consensys Gnark-crypto, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-44273 — CVSS 9.8 (critical): Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and ECDSA signatures does…
• CVE-2024-45039 — CVSS 6.2 (medium): gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundness issue - in case…
• CVE-2024-45040 — CVSS 5.9 (medium): gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.11.0, commitments to private witnesses…