crates.io/sp1_sdk CVE-2026-40323: high, EPSS 0.22%

SP1 V6 Recursion Circuit Row-Count Binding Gap

Action: Upgrade sp1_sdk to 6.1.0 or later.

cargo update -p sp1_sdk --precise 6.1.0

Affected

Fixed versions

Sources

• osv: GHSA-63x8-x938-vx33
• https://github.com/succinctlabs/sp1/security/advisories/GHSA-63x8-x938-vx33
• https://nvd.nist.gov/vuln/detail/CVE-2026-40323
• https://github.com/succinctlabs/sp1
• https://github.com/succinctlabs/sp1/releases/tag/v6.1.0

CVE-2026-40323 · published 2026-04-14T00:05:19Z · modified 2026-05-05T16:02:07.232519Z · JSON