crates.io/sp1_prover CVE-2026-40323: high 7.5, EPSS 0.19%

SP1 V6 Recursion Circuit Row-Count Binding Gap

Action: Upgrade sp1_prover to 6.1.0 or later.

cargo update -p sp1_prover --precise 6.1.0

Affected

Fixed versions

Sources

• osv: GHSA-63x8-x938-vx33#crates.io/sp1_prover
• nvd: CVE-2026-40323
• https://github.com/succinctlabs/sp1/security/advisories/GHSA-63x8-x938-vx33
• https://github.com/succinctlabs/sp1
• https://github.com/succinctlabs/sp1/releases/tag/v6.1.0

CVE-2026-40323 · published 2026-04-14T00:05:19Z · modified 2026-05-05T16:02:07.232519Z · JSON